Mercurial > dnsbl
annotate ChangeLog @ 160:b3ed72ee6564
allow manual updates to auto whitelist files
| author | carl |
|---|---|
| date | Tue, 10 Jul 2007 11:20:23 -0700 |
| parents | c7fc218686f5 |
| children | c4bce911c276 |
| rev | line source |
|---|---|
|
98
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
1 $Id$ |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
2 |
| 160 | 3 6.02 2007-07-10 |
| 4 Allow manual updates to the auto whitelisting files, mainly for | |
| 5 scp or rsync synchronization between primary and backup mx | |
| 6 systems. | |
| 7 | |
| 152 | 8 6.01 2007-07-07 |
| 9 GPL3. Block mail to recipients that cannot reply. Start auto | |
| 10 whitelisting. | |
| 11 | |
| 12 5.30 2007-06-09 | |
| 13 Selinux fix - redirect stdout for useradd to make selinux happy. | |
| 14 | |
| 151 | 15 5.29 2007-03-27 |
| 150 | 16 Limit dns resolver to two retries five seconds apart. |
| 17 | |
| 149 | 18 5.28 2007-02-19 |
| 19 Change the conflict resolution algorithm to "second one wins" if we | |
| 20 have two contexts that both define env_to user@. Update ICANN tld | |
| 21 list. | |
| 22 | |
|
148
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
23 5.27 2007-01-30 |
|
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
24 Allow 'inherit' as an env_from target. Documentation cleanup |
|
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
25 from G.W. Haywood. |
|
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
26 |
| 147 | 27 5.26 2006-12-04 |
| 28 Fix bug in content filtering introduced in 5.23 that prevented | |
| 29 seeing any host names in the body. | |
| 30 | |
| 145 | 31 5.25 2006-10-15 |
| 32 DNSBL lists are inherited, so dump the effective list with the | |
| 33 -c switch. | |
| 34 | |
|
144
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
35 5.24 2006-10-15 |
|
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
36 Allow child and parent context to specify the same fully qualified |
|
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
37 env_to address. Only dump the rate limit for the default context |
|
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
38 with -c switch. |
|
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
39 |
| 143 | 40 5.23 2006-10-10 |
| 41 Require two periods in ip addresses. | |
| 42 | |
| 140 | 43 5.22 2006-09-27 |
| 44 Change syntax for default rate limit. Improve hourly reset of | |
| 45 limits. Warning for rate limits in non default contexts to allow | |
| 46 nesting of client configurations. | |
| 47 | |
| 136 | 48 5.21 2006-09-26 |
| 49 Add SMTP AUTH recipient rate limits, to help throttle infected | |
| 50 client machines and accounts with weak cracked passwords. | |
| 51 | |
| 134 | 52 5.20 2006-08-02 |
| 53 Fully qualify all dns lookups. Fix my_read() bug. Try to convert | |
| 54 names that might be ip addresses via inet_aton before doing dns | |
| 55 lookups. | |
| 56 | |
|
131
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
57 5.19 2006-08-01 |
|
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
58 Bug fix - add trailing dot to uribl dns lookups to make them fully |
|
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
59 qualified. Check host names with only two components, since |
|
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
60 spammers are now using bare http://domain.tld references. |
|
133
b8ce1b31237d
uribl lookups fully qualified; allow two component host names
carl
parents:
131
diff
changeset
|
61 Spec file now creates an rpm that properly creates the dnsbl user. |
|
131
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
62 |
| 128 | 63 5.18 2006-04-27 |
| 127 | 64 Bug fix - newer sendmail versions don't guarantee envelope addresses |
| 65 enclosed in <> wrapper. | |
| 66 | |
| 67 Document backscatter prevention configuration for systems that are | |
| 68 used to mainly spam filter and then forward to mail to the internal | |
| 69 server. | |
| 70 | |
| 128 | 71 Never ask uribl blacklists about rfc1918 address space. |
| 72 | |
| 126 | 73 5.17 2006-03-25 |
| 127 | 74 Never ask dns blacklists about rfc1918 address space. |
| 126 | 75 |
| 125 | 76 5.16 2006-03-16 |
| 127 | 77 Bug fix - the smtp error message for uribl filtering needs to |
| 125 | 78 reference the host name, not the ip address. |
| 79 | |
| 123 | 80 5.15 2006-03-15 |
| 127 | 81 Bug fix - we failed to properly set the return code to indicate the |
| 123 | 82 reason when rejecting mail for content filtering. |
| 83 | |
| 122 | 84 5.14 2006-03-13 |
| 127 | 85 Fix a typo in the default config file and documentation for using |
| 122 | 86 multi.surbl.org |
| 87 | |
| 117 | 88 5.13 2006-03-12 |
| 89 patch from Jeff Evans <jeffe@tricab.com> | |
| 121 | 90 add SURBL/URIBL lookups, remove trailing dots from hostnames, |
| 91 allow ip address literals as hostnames. | |
| 92 add configuration for surbl/uribl list and reject message | |
| 93 | |
| 115 | 94 5.12 2006-01-08 |
| 95 Use larger resolver buffer to accomodate spammers with many name | |
| 96 servers. A current example is life-all.com which needs to retry in | |
| 97 tcp mode to fetch the 1444 byte response. | |
| 98 | |
|
116
0094678a16d0
update all systems from tarball, make chkconfig creates dnsbl user if needed
carl
parents:
115
diff
changeset
|
99 'make chkconfig' now creates the dnsbl user if it does not exist. |
|
0094678a16d0
update all systems from tarball, make chkconfig creates dnsbl user if needed
carl
parents:
115
diff
changeset
|
100 |
| 113 | 101 5.11 2005-12-20 |
| 102 switch to autoconf/automake/docbook | |
| 103 | |
| 102 | 104 5.10 2005-10-16 |
| 105 Fix a compile error on Fedora Core 3. | |
| 106 Discovered by Nigel Horne <njh@bandsman.co.uk> | |
| 107 | |
| 101 | 108 5.9 2005-09-26 |
| 109 Fix a bug with empty return paths passed to the verification code. | |
| 110 That resulted in 'MAIL FROM:<<>>' being sent to the verification | |
| 111 mail server. | |
| 112 | |
|
100
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
113 5.8 2005-09-25 |
|
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
114 Allow empty env_to at global context level to remove restrictions |
|
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
115 on env_to values in child contexts. |
|
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
116 |
| 99 | 117 5.7 2005-09-23 |
| 118 Failed to return a value from parse_verify() which caused failures | |
| 119 to load the configuration. | |
| 120 | |
|
98
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
121 5.6 2005-09-22 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
122 Tokenizer errors now go thru the syslog code, so they are visible |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
123 when generated during config file reloads during normal operation. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
124 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
125 5.5 2005-09-21 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
126 Cleanup debug logging. Verify from/to pairs now remembers the last |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
127 from value sent to the remote server to prevent unnecessary rset |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
128 commands. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
129 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
130 5.4 2005-09-18 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
131 Add verify statement to specify the smtp host to be used to verify |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
132 envelope from / recipient pairs. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
133 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
134 Authenticated clients are now exempt from all white/black listing |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
135 in addition to the dnsbl lookups. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
136 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
137 dcc_to should not look at substitute mail_host. That is only used |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
138 by dcc_from. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
139 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
140 5.3 2005-08-07 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
141 Properly quit if the config file has syntax errors on startup. Send |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
142 mail to root if the config file needs to be reloaded since it was |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
143 modified, but contains syntax errors. In this case, we continue to |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
144 use the old configuration. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
145 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
146 5.2 2005-08-02 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
147 Patch from Stephen Johnson <stephen.johnson@arkansas.gov> fixing the |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
148 lack of a default return value in CONTEXT::acceptable_content(). |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
149 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
150 5.1 2005-07-20 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
151 Add multiple syslog debug levels. Detect and silently remove |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
152 duplicate DNSBL definitions. That allows us to accept mail to |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
153 recipients in multiple domains that use the same blacklist and yet |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
154 only check that blacklist once. This may happen when your config |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
155 file directly includes as child contexts the config files used on |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
156 your clients mail servers. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
157 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
158 5.0 2005-07-16 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
159 Major changes to the syntax of the config file. Content filtering |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
160 is no longer a global mail server setting. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
161 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
162 4.6 2005-04-02 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
163 Fix enum compilation error on Fedora Core 3. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
164 Discovered by Nigel Horne <njh@bandsman.co.uk> |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
165 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
166 Remove bad html tag command from the default conf file. Spammers |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
167 seem to have abandoned this. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
168 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
169 Add toolbar.msn.click-url.com in hosts-ignore.conf. These are all |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
170 commented, but you might want to uncomment them. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
171 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
172 4.5 2005-01-22 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
173 Add uuencode decoding for old style attachments. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
174 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
175 4.4 2005-01-18 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
176 Bug fix in forked process termination that left zombies. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
177 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
178 4.3 2005-01-16 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
179 Only keep 20% of the resolver sockets in the ready pool. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
180 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
181 4.2 2005-01-08 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
182 Use the separate resolver processes even if we don't have the |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
183 resolver interfaces and need gethostbyname. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
184 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
185 4.1 2005-01-06 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
186 Use a local unix domain socket for the resolver process |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
187 communication, rather than a tcp/ip socket. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
188 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
189 4.0 2005-01-03 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
190 Initialize the thread mutex objects early, before they are needed |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
191 by possible calls to my_syslog. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
192 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
193 Fork off a separate resolver listener process, so we can do multiple |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
194 dns operations in parallel. For each simultaneous inbound email, |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
195 we have a separate sendmail process, a milter thread, and a dns |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
196 resolver process. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
197 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
198 3.7 2004-10-28 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
199 Added an 'ignore' command to the conf file, used to ignore some |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
200 hosts that might end up on the SBL and otherwise trip the content |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
201 scanning filter. In particular, many recent Microsoft Word |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
202 documents contain the string www.5iantlavalamp.com which is |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
203 associated with their smart tags stuff. That is currently hosted at |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
204 216.168.224.70, which is shared with a site that ended up on the |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
205 SBL. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
206 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
207 3.6 2004-09-08 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
208 Contributions from Dan Harkless <software@harkless.org> |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
209 Better documentation for disabling the content filtering. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
210 Don't bother looking at the body text if we are not doing |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
211 content filtering. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
212 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
213 3.5 2004-07-17 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
214 Extend the error message for content filtering when the NS record |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
215 points to an ip address on the SBL. Include the original host name |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
216 that referenced that NS name. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
217 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
218 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
219 3.4 2004-07-15 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
220 Tokens with two consecutive periods cannot be ip addresses or host |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
221 names. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
222 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
223 Updated dnsbl.spec file for building rpms from John Gunkel. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
224 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
225 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
226 3.3 2004-07-09 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
227 Drop root priviledges properly, including the group id. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
228 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
229 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
230 3.2 2004-07-09 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
231 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
232 Contributions from John Gunkel <jgunkel@palliser.ca>: |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
233 Add .spec file for building rpms, contributed by John Gunkel |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
234 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
235 Changes to file layout to conform to RedHat/LSB standards. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
236 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
237 Add some html (actually xml) tags used by Apple mac print |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
238 subsystem that were tripping the html tag detector. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
239 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
240 Help with changes required to allow dnsbl to drop root |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
241 priviledges. Move the socket to /var/run/dnsbl/dnsbl.sock |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
242 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
243 Change parser to handle &#xnnn; obfuscated urls with charaters |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
244 specified in hex. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
245 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
246 Make bad_html tags more sensitive to binary tags, to reduce false |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
247 positives in .zip or .tar.gz file attachments. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
248 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
249 Add sendmail queueid to the dnsbl syslog messages. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
250 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
251 Fix one place where host names were not forced to lower case. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
252 Discovered by Nigel Horne <njh@bandsman.co.uk> |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
253 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
254 Remove duplicate dns queries within the same smtp transaction from |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
255 the body content filtering. This helps if the mail server does not |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
256 have a nearby caching dns server. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
257 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
258 Add host_soft_limit config keyword. Use only one of host_limit or |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
259 host_soft_limit, since the last one wins. The host_limit is a hard |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
260 upper limit on the number of host names in a message. The |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
261 host_soft_limit allows unlimited host names, but only checks a |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
262 random sample of them against the dnsbl. |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
263 |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
264 The main thread has dropped root priviledges, but other threads |
|
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
265 are still running as root. This needs to be fixed. |