Mercurial > dnsbl
annotate ChangeLog @ 194:688ec12a3c0c stable-6-0-14
delay autowhitelisting to avoid out of office reply bots
author | carl |
---|---|
date | Sun, 11 Nov 2007 13:21:48 -0800 |
parents | 8f4a9a37d4d9 |
children | 797299e9fffc |
rev | line source |
---|---|
98
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
1 $Id$ |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
2 |
192
8f4a9a37d4d9
delay autowhitelisting to avoid out of office reply bots
carl
parents:
190
diff
changeset
|
3 6.14 2007-11-11 |
8f4a9a37d4d9
delay autowhitelisting to avoid out of office reply bots
carl
parents:
190
diff
changeset
|
4 Delay auto whitelisting until we see the headers, to prevent |
8f4a9a37d4d9
delay autowhitelisting to avoid out of office reply bots
carl
parents:
190
diff
changeset
|
5 auto whitelisting due to bulk out of office reply bots. |
8f4a9a37d4d9
delay autowhitelisting to avoid out of office reply bots
carl
parents:
190
diff
changeset
|
6 |
187
f0eda59e8afd
fix null pointer dereference from missing HELO command
carl
parents:
185
diff
changeset
|
7 6.13 2007-11-10 |
f0eda59e8afd
fix null pointer dereference from missing HELO command
carl
parents:
185
diff
changeset
|
8 HELO command is optional, and if missing caused a null pointer |
190
004b855c6c1f
fix null pointer dereference from missing HELO command
carl
parents:
189
diff
changeset
|
9 dereference. Use smfi_progress in libmilter if it is available. |
187
f0eda59e8afd
fix null pointer dereference from missing HELO command
carl
parents:
185
diff
changeset
|
10 |
185 | 11 6.12 2007-10-13 |
12 SMTP rejections take precedence over greylisting. | |
13 | |
184 | 14 6.11 2007-10-07 |
178 | 15 Add DCC filtering via dccifd. Drop to 60 seconds the time we will |
16 keep idle smtp verify sockets around. This needs to be about half | |
17 the value of confTO_COMMAND configured on the verify targets. | |
18 Fix potential race condition or buffer overflow caused by static | |
19 buffer referenced by multiple threads. | |
177 | 20 |
174 | 21 6.10 2007-09-23 |
22 Don't whitelist addresses with embedded blanks, or the empty | |
176
4ec928b24bab
allow manual whitelisting with stamp 1 to remove a whitelist entry
carl
parents:
174
diff
changeset
|
23 path. Allow manual removal of auto whitelist entries. |
174 | 24 |
173
83fe0be032c1
fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents:
172
diff
changeset
|
25 6.09 2007-09-06 |
83fe0be032c1
fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents:
172
diff
changeset
|
26 Fix memory leak in auto-whitelisting code. Update auto-whitelist |
83fe0be032c1
fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents:
172
diff
changeset
|
27 timestamps when receiving mail from auto-whitelisted senders. |
83fe0be032c1
fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents:
172
diff
changeset
|
28 |
172
d3189495ec68
don't do generic rdns filtering on whitelisted recipients
carl
parents:
169
diff
changeset
|
29 6.08 2007-08-30 |
d3189495ec68
don't do generic rdns filtering on whitelisted recipients
carl
parents:
169
diff
changeset
|
30 Don't do generic reverse dns filtering on authenticated connections. |
d3189495ec68
don't do generic rdns filtering on whitelisted recipients
carl
parents:
169
diff
changeset
|
31 |
168 | 32 6.07 2007-08-30 |
33 Add generic reverse dns filtering with regular expression. | |
169 | 34 Fix pre/post scripts in the rpm spec file. |
168 | 35 |
36 6.06 2007-08-27 | |
167
9b129ed78d7d
actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents:
165
diff
changeset
|
37 Fix bug that effectively disabled spamassassin filtering. Improve |
9b129ed78d7d
actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents:
165
diff
changeset
|
38 spamassassin filtering documentation. Generate warning if the |
9b129ed78d7d
actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents:
165
diff
changeset
|
39 config file specifies spam assassin filtering, but spamc is not |
9b129ed78d7d
actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents:
165
diff
changeset
|
40 found by autoconf. |
9b129ed78d7d
actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents:
165
diff
changeset
|
41 |
168 | 42 6.05 2007-08-26 |
165 | 43 Fix unitialized variable in my spamassassin code. |
44 | |
168 | 45 6.04 2007-08-26 |
165 | 46 Add spamassassin integration via spamc, code from spamass-milter. |
47 | |
162 | 48 6.03 2007-07-14 |
49 Don't add auto whitelist entries for our own domains. | |
50 | |
160 | 51 6.02 2007-07-10 |
52 Allow manual updates to the auto whitelisting files, mainly for | |
53 scp or rsync synchronization between primary and backup mx | |
54 systems. | |
55 | |
152 | 56 6.01 2007-07-07 |
57 GPL3. Block mail to recipients that cannot reply. Start auto | |
58 whitelisting. | |
59 | |
60 5.30 2007-06-09 | |
61 Selinux fix - redirect stdout for useradd to make selinux happy. | |
62 | |
151 | 63 5.29 2007-03-27 |
150 | 64 Limit dns resolver to two retries five seconds apart. |
65 | |
149 | 66 5.28 2007-02-19 |
67 Change the conflict resolution algorithm to "second one wins" if we | |
68 have two contexts that both define env_to user@. Update ICANN tld | |
69 list. | |
70 | |
148
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
71 5.27 2007-01-30 |
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
72 Allow 'inherit' as an env_from target. Documentation cleanup |
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
73 from G.W. Haywood. |
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
74 |
147 | 75 5.26 2006-12-04 |
76 Fix bug in content filtering introduced in 5.23 that prevented | |
77 seeing any host names in the body. | |
78 | |
145 | 79 5.25 2006-10-15 |
80 DNSBL lists are inherited, so dump the effective list with the | |
81 -c switch. | |
82 | |
144
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
83 5.24 2006-10-15 |
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
84 Allow child and parent context to specify the same fully qualified |
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
85 env_to address. Only dump the rate limit for the default context |
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
86 with -c switch. |
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
87 |
143 | 88 5.23 2006-10-10 |
89 Require two periods in ip addresses. | |
90 | |
140 | 91 5.22 2006-09-27 |
92 Change syntax for default rate limit. Improve hourly reset of | |
93 limits. Warning for rate limits in non default contexts to allow | |
94 nesting of client configurations. | |
95 | |
136 | 96 5.21 2006-09-26 |
97 Add SMTP AUTH recipient rate limits, to help throttle infected | |
98 client machines and accounts with weak cracked passwords. | |
99 | |
134 | 100 5.20 2006-08-02 |
101 Fully qualify all dns lookups. Fix my_read() bug. Try to convert | |
102 names that might be ip addresses via inet_aton before doing dns | |
103 lookups. | |
104 | |
131
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
105 5.19 2006-08-01 |
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
106 Bug fix - add trailing dot to uribl dns lookups to make them fully |
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
107 qualified. Check host names with only two components, since |
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
108 spammers are now using bare http://domain.tld references. |
133
b8ce1b31237d
uribl lookups fully qualified; allow two component host names
carl
parents:
131
diff
changeset
|
109 Spec file now creates an rpm that properly creates the dnsbl user. |
131
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
110 |
128 | 111 5.18 2006-04-27 |
127 | 112 Bug fix - newer sendmail versions don't guarantee envelope addresses |
113 enclosed in <> wrapper. | |
114 | |
115 Document backscatter prevention configuration for systems that are | |
116 used to mainly spam filter and then forward to mail to the internal | |
117 server. | |
118 | |
128 | 119 Never ask uribl blacklists about rfc1918 address space. |
120 | |
126 | 121 5.17 2006-03-25 |
127 | 122 Never ask dns blacklists about rfc1918 address space. |
126 | 123 |
125 | 124 5.16 2006-03-16 |
127 | 125 Bug fix - the smtp error message for uribl filtering needs to |
125 | 126 reference the host name, not the ip address. |
127 | |
123 | 128 5.15 2006-03-15 |
127 | 129 Bug fix - we failed to properly set the return code to indicate the |
123 | 130 reason when rejecting mail for content filtering. |
131 | |
122 | 132 5.14 2006-03-13 |
127 | 133 Fix a typo in the default config file and documentation for using |
122 | 134 multi.surbl.org |
135 | |
117 | 136 5.13 2006-03-12 |
137 patch from Jeff Evans <jeffe@tricab.com> | |
121 | 138 add SURBL/URIBL lookups, remove trailing dots from hostnames, |
139 allow ip address literals as hostnames. | |
140 add configuration for surbl/uribl list and reject message | |
141 | |
115 | 142 5.12 2006-01-08 |
143 Use larger resolver buffer to accomodate spammers with many name | |
144 servers. A current example is life-all.com which needs to retry in | |
145 tcp mode to fetch the 1444 byte response. | |
146 | |
116
0094678a16d0
update all systems from tarball, make chkconfig creates dnsbl user if needed
carl
parents:
115
diff
changeset
|
147 'make chkconfig' now creates the dnsbl user if it does not exist. |
0094678a16d0
update all systems from tarball, make chkconfig creates dnsbl user if needed
carl
parents:
115
diff
changeset
|
148 |
113 | 149 5.11 2005-12-20 |
150 switch to autoconf/automake/docbook | |
151 | |
102 | 152 5.10 2005-10-16 |
153 Fix a compile error on Fedora Core 3. | |
154 Discovered by Nigel Horne <njh@bandsman.co.uk> | |
155 | |
101 | 156 5.9 2005-09-26 |
157 Fix a bug with empty return paths passed to the verification code. | |
158 That resulted in 'MAIL FROM:<<>>' being sent to the verification | |
159 mail server. | |
160 | |
100
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
161 5.8 2005-09-25 |
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
162 Allow empty env_to at global context level to remove restrictions |
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
163 on env_to values in child contexts. |
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
164 |
99 | 165 5.7 2005-09-23 |
166 Failed to return a value from parse_verify() which caused failures | |
167 to load the configuration. | |
168 | |
98
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
169 5.6 2005-09-22 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
170 Tokenizer errors now go thru the syslog code, so they are visible |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
171 when generated during config file reloads during normal operation. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
172 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
173 5.5 2005-09-21 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
174 Cleanup debug logging. Verify from/to pairs now remembers the last |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
175 from value sent to the remote server to prevent unnecessary rset |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
176 commands. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
177 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
178 5.4 2005-09-18 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
179 Add verify statement to specify the smtp host to be used to verify |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
180 envelope from / recipient pairs. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
181 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
182 Authenticated clients are now exempt from all white/black listing |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
183 in addition to the dnsbl lookups. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
184 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
185 dcc_to should not look at substitute mail_host. That is only used |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
186 by dcc_from. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
187 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
188 5.3 2005-08-07 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
189 Properly quit if the config file has syntax errors on startup. Send |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
190 mail to root if the config file needs to be reloaded since it was |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
191 modified, but contains syntax errors. In this case, we continue to |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
192 use the old configuration. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
193 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
194 5.2 2005-08-02 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
195 Patch from Stephen Johnson <stephen.johnson@arkansas.gov> fixing the |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
196 lack of a default return value in CONTEXT::acceptable_content(). |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
197 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
198 5.1 2005-07-20 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
199 Add multiple syslog debug levels. Detect and silently remove |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
200 duplicate DNSBL definitions. That allows us to accept mail to |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
201 recipients in multiple domains that use the same blacklist and yet |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
202 only check that blacklist once. This may happen when your config |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
203 file directly includes as child contexts the config files used on |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
204 your clients mail servers. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
205 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
206 5.0 2005-07-16 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
207 Major changes to the syntax of the config file. Content filtering |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
208 is no longer a global mail server setting. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
209 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
210 4.6 2005-04-02 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
211 Fix enum compilation error on Fedora Core 3. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
212 Discovered by Nigel Horne <njh@bandsman.co.uk> |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
213 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
214 Remove bad html tag command from the default conf file. Spammers |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
215 seem to have abandoned this. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
216 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
217 Add toolbar.msn.click-url.com in hosts-ignore.conf. These are all |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
218 commented, but you might want to uncomment them. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
219 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
220 4.5 2005-01-22 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
221 Add uuencode decoding for old style attachments. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
222 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
223 4.4 2005-01-18 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
224 Bug fix in forked process termination that left zombies. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
225 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
226 4.3 2005-01-16 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
227 Only keep 20% of the resolver sockets in the ready pool. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
228 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
229 4.2 2005-01-08 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
230 Use the separate resolver processes even if we don't have the |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
231 resolver interfaces and need gethostbyname. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
232 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
233 4.1 2005-01-06 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
234 Use a local unix domain socket for the resolver process |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
235 communication, rather than a tcp/ip socket. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
236 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
237 4.0 2005-01-03 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
238 Initialize the thread mutex objects early, before they are needed |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
239 by possible calls to my_syslog. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
240 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
241 Fork off a separate resolver listener process, so we can do multiple |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
242 dns operations in parallel. For each simultaneous inbound email, |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
243 we have a separate sendmail process, a milter thread, and a dns |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
244 resolver process. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
245 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
246 3.7 2004-10-28 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
247 Added an 'ignore' command to the conf file, used to ignore some |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
248 hosts that might end up on the SBL and otherwise trip the content |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
249 scanning filter. In particular, many recent Microsoft Word |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
250 documents contain the string www.5iantlavalamp.com which is |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
251 associated with their smart tags stuff. That is currently hosted at |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
252 216.168.224.70, which is shared with a site that ended up on the |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
253 SBL. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
254 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
255 3.6 2004-09-08 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
256 Contributions from Dan Harkless <software@harkless.org> |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
257 Better documentation for disabling the content filtering. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
258 Don't bother looking at the body text if we are not doing |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
259 content filtering. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
260 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
261 3.5 2004-07-17 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
262 Extend the error message for content filtering when the NS record |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
263 points to an ip address on the SBL. Include the original host name |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
264 that referenced that NS name. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
265 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
266 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
267 3.4 2004-07-15 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
268 Tokens with two consecutive periods cannot be ip addresses or host |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
269 names. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
270 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
271 Updated dnsbl.spec file for building rpms from John Gunkel. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
272 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
273 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
274 3.3 2004-07-09 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
275 Drop root priviledges properly, including the group id. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
276 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
277 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
278 3.2 2004-07-09 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
279 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
280 Contributions from John Gunkel <jgunkel@palliser.ca>: |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
281 Add .spec file for building rpms, contributed by John Gunkel |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
282 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
283 Changes to file layout to conform to RedHat/LSB standards. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
284 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
285 Add some html (actually xml) tags used by Apple mac print |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
286 subsystem that were tripping the html tag detector. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
287 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
288 Help with changes required to allow dnsbl to drop root |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
289 priviledges. Move the socket to /var/run/dnsbl/dnsbl.sock |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
290 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
291 Change parser to handle &#xnnn; obfuscated urls with charaters |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
292 specified in hex. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
293 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
294 Make bad_html tags more sensitive to binary tags, to reduce false |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
295 positives in .zip or .tar.gz file attachments. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
296 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
297 Add sendmail queueid to the dnsbl syslog messages. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
298 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
299 Fix one place where host names were not forced to lower case. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
300 Discovered by Nigel Horne <njh@bandsman.co.uk> |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
301 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
302 Remove duplicate dns queries within the same smtp transaction from |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
303 the body content filtering. This helps if the mail server does not |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
304 have a nearby caching dns server. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
305 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
306 Add host_soft_limit config keyword. Use only one of host_limit or |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
307 host_soft_limit, since the last one wins. The host_limit is a hard |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
308 upper limit on the number of host names in a message. The |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
309 host_soft_limit allows unlimited host names, but only checks a |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
310 random sample of them against the dnsbl. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
311 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
312 The main thread has dropped root priviledges, but other threads |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
313 are still running as root. This needs to be fixed. |