dnsbl: ChangeLog annotate

annotate ChangeLog @ 412:e63c6b4835ef stable-6-0-56

refactor spf code; allow wildcard *.example.com in dkim signing restrictions

author	Carl Byington <carl@five-ten-sg.com>
date	Wed, 19 Apr 2017 09:26:14 -0700
parents	e018ed19a1cc
children	d5a1ed33d3ae

rev	line source
412 e63c6b4835ef refactor spf code; allow wildcard .example.com in dkim signing restrictions Carl Byington <carl@five-ten-sg.com>* parents: 409 diff changeset	1 6.56 2017-04-19
e63c6b4835ef refactor spf code; allow wildcard .example.com in dkim signing restrictions Carl Byington <carl@five-ten-sg.com>* parents: 409 diff changeset	2 refactor spf code; allow wildcard *.example.com in dkim
e63c6b4835ef refactor spf code; allow wildcard .example.com in dkim signing restrictions Carl Byington <carl@five-ten-sg.com>* parents: 409 diff changeset	3 signing restrictions
e63c6b4835ef refactor spf code; allow wildcard .example.com in dkim signing restrictions Carl Byington <carl@five-ten-sg.com>* parents: 409 diff changeset	4
409 e018ed19a1cc require 3 dots in bare ip addresses Carl Byington <carl@five-ten-sg.com> parents: 407 diff changeset	5 6.55 2017-04-16
e018ed19a1cc require 3 dots in bare ip addresses Carl Byington <carl@five-ten-sg.com> parents: 407 diff changeset	6 require 3 dots in bare ip addresses.
e018ed19a1cc require 3 dots in bare ip addresses Carl Byington <carl@five-ten-sg.com> parents: 407 diff changeset	7
407 29d54e7028f6 document dmarc vs dnsbl dkim/spf; switch to . rather than " " for dkim impossible signer Carl Byington <carl@five-ten-sg.com> parents: 405 diff changeset	8 6.54 2017-03-30
29d54e7028f6 document dmarc vs dnsbl dkim/spf; switch to . rather than " " for dkim impossible signer Carl Byington <carl@five-ten-sg.com> parents: 405 diff changeset	9 document dmarc vs dnsbl dkim/spf. switch to . rather than
29d54e7028f6 document dmarc vs dnsbl dkim/spf; switch to . rather than " " for dkim impossible signer Carl Byington <carl@five-ten-sg.com> parents: 405 diff changeset	10 " " for dkim impossible signer.
29d54e7028f6 document dmarc vs dnsbl dkim/spf; switch to . rather than " " for dkim impossible signer Carl Byington <carl@five-ten-sg.com> parents: 405 diff changeset	11
405 8f3a84de3739 handle redirect= elements in spf txt records Carl Byington <carl@five-ten-sg.com> parents: 403 diff changeset	12 6.53 2017-03-17
403 e70d9110d9f5 suppress duplicate calls to acceptable_content for messages with multiple recipients using the same filtering context Carl Byington <carl@five-ten-sg.com> parents: 400 diff changeset	13 suppress duplicate calls to acceptable_content for
e70d9110d9f5 suppress duplicate calls to acceptable_content for messages with multiple recipients using the same filtering context Carl Byington <carl@five-ten-sg.com> parents: 400 diff changeset	14 messages with multiple recipients using the same filtering
405 8f3a84de3739 handle redirect= elements in spf txt records Carl Byington <carl@five-ten-sg.com> parents: 403 diff changeset	15 context. handle redirect= elements in spf txt records
403 e70d9110d9f5 suppress duplicate calls to acceptable_content for messages with multiple recipients using the same filtering context Carl Byington <carl@five-ten-sg.com> parents: 400 diff changeset	16
400 b48ee4bc431b handle a and a: elements in spf txt records Carl Byington <carl@five-ten-sg.com> parents: 395 diff changeset	17 6.52 2017-03-09
b48ee4bc431b handle a and a: elements in spf txt records Carl Byington <carl@five-ten-sg.com> parents: 395 diff changeset	18 document dkim/spf processing, handle a and a: elements
395 a8cf6a3da907 document dkim/spf processing Carl Byington <carl@five-ten-sg.com> parents: 382 diff changeset	19
382 c378e9d03f37 start parsing spf txt records Carl Byington <carl@five-ten-sg.com> parents: 381 diff changeset	20 6.51 2017-03-06
c378e9d03f37 start parsing spf txt records Carl Byington <carl@five-ten-sg.com> parents: 381 diff changeset	21 parse spf txt records for required dkim signers
381 879a470c6ac3 fetch spf txt records for required dkim signers Carl Byington <carl@five-ten-sg.com> parents: 377 diff changeset	22
879a470c6ac3 fetch spf txt records for required dkim signers Carl Byington <carl@five-ten-sg.com> parents: 377 diff changeset	23 6.50 2017-02-22
377 7fd39f029936 reject if dkim signer is listed on surbl Carl Byington <carl@five-ten-sg.com> parents: 370 diff changeset	24 reject if dkim signer is listed on surbl
7fd39f029936 reject if dkim signer is listed on surbl Carl Byington <carl@five-ten-sg.com> parents: 370 diff changeset	25
381 879a470c6ac3 fetch spf txt records for required dkim signers Carl Byington <carl@five-ten-sg.com> parents: 377 diff changeset	26 6.49 2017-02-08
370 5380552644e2 RHEL7 systemd and /var/run on tmpfs Carl Byington <carl@five-ten-sg.com> parents: 321 diff changeset	27 RHEL7 systemd and /var/run on tmpfs.
5380552644e2 RHEL7 systemd and /var/run on tmpfs Carl Byington <carl@five-ten-sg.com> parents: 321 diff changeset	28
321 e172dc10fe24 add dkim white/black listing Carl Byington <carl@five-ten-sg.com> parents: 316 diff changeset	29 6.48 2016-12-17
e172dc10fe24 add dkim white/black listing Carl Byington <carl@five-ten-sg.com> parents: 316 diff changeset	30 Add dkim white/black listing
e172dc10fe24 add dkim white/black listing Carl Byington <carl@five-ten-sg.com> parents: 316 diff changeset	31
316 f7c5cfb76e86 better smtp verify logging Carl Byington <carl@five-ten-sg.com> parents: 312 diff changeset	32 6.47 2016-09-21
f7c5cfb76e86 better smtp verify logging Carl Byington <carl@five-ten-sg.com> parents: 312 diff changeset	33 Better smtp verify logging
f7c5cfb76e86 better smtp verify logging Carl Byington <carl@five-ten-sg.com> parents: 312 diff changeset	34
312 9c71faaae576 enable smtp verify logging Carl Byington <carl@five-ten-sg.com> parents: 311 diff changeset	35 6.46 2016-09-19
311 f5547e7b3a09 enable smtp verify logging Carl Byington <carl@five-ten-sg.com> parents: 305 diff changeset	36 Enable smtp verify logging
f5547e7b3a09 enable smtp verify logging Carl Byington <carl@five-ten-sg.com> parents: 305 diff changeset	37
305 1f40b1b0ad31 add bitcoin donation address Carl Byington <carl@five-ten-sg.com> parents: 301 diff changeset	38 6.45 2015-04-09
1f40b1b0ad31 add bitcoin donation address Carl Byington <carl@five-ten-sg.com> parents: 301 diff changeset	39 Add bitcoin donation address
1f40b1b0ad31 add bitcoin donation address Carl Byington <carl@five-ten-sg.com> parents: 301 diff changeset	40
301 13905d36ca82 Generic regex now matches against the reverse dns PTR value Carl Byington <carl@five-ten-sg.com> parents: 294 diff changeset	41 6.44 2014-10-13
13905d36ca82 Generic regex now matches against the reverse dns PTR value Carl Byington <carl@five-ten-sg.com> parents: 294 diff changeset	42 Generic regex now matches against the reverse dns PTR value
13905d36ca82 Generic regex now matches against the reverse dns PTR value Carl Byington <carl@five-ten-sg.com> parents: 294 diff changeset	43
294 7fb5911fe3a4 allow broken SRS0+ rather than the correct SRS0= tag Carl Byington <carl@five-ten-sg.com> parents: 291 diff changeset	44 6.43 2014-07-18
7fb5911fe3a4 allow broken SRS0+ rather than the correct SRS0= tag Carl Byington <carl@five-ten-sg.com> parents: 291 diff changeset	45 Allow broken SRS0+ rather than the correct SRS0= tag.
7fb5911fe3a4 allow broken SRS0+ rather than the correct SRS0= tag Carl Byington <carl@five-ten-sg.com> parents: 291 diff changeset	46
291 9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost Carl Byington <carl@five-ten-sg.com> parents: 286 diff changeset	47 6.42 2014-06-28
9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost Carl Byington <carl@five-ten-sg.com> parents: 286 diff changeset	48 Never add auto-whitelist entries for outgoing mail from localhost.
9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost Carl Byington <carl@five-ten-sg.com> parents: 286 diff changeset	49
9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost Carl Byington <carl@five-ten-sg.com> parents: 286 diff changeset	50 6.41 2014-03-21
9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost Carl Byington <carl@five-ten-sg.com> parents: 286 diff changeset	51 Unique ip connection limits only apply to authenticated connections.
9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost Carl Byington <carl@five-ten-sg.com> parents: 286 diff changeset	52
286 9bd5388bf469 Fix possible segfault in mlfi_connect, hostaddr might be null Carl Byington <carl@five-ten-sg.com> parents: 284 diff changeset	53 6.40 2014-02-05
9bd5388bf469 Fix possible segfault in mlfi_connect, hostaddr might be null Carl Byington <carl@five-ten-sg.com> parents: 284 diff changeset	54 Fix possible segfault in mlfi_connect, hostaddr might be null.
9bd5388bf469 Fix possible segfault in mlfi_connect, hostaddr might be null Carl Byington <carl@five-ten-sg.com> parents: 284 diff changeset	55
284 896b9393d3f0 Fix segfault caused by freeing unallocated memory Carl Byington <carl@five-ten-sg.com> parents: 282 diff changeset	56 6.39 2013-12-31
896b9393d3f0 Fix segfault caused by freeing unallocated memory Carl Byington <carl@five-ten-sg.com> parents: 282 diff changeset	57 Fix segfault caused by freeing unallocated memory.
896b9393d3f0 Fix segfault caused by freeing unallocated memory Carl Byington <carl@five-ten-sg.com> parents: 282 diff changeset	58
282 e276180647ab Activate check for unique ip connection limits Carl Byington <carl@five-ten-sg.com> parents: 279 diff changeset	59 6.38 2013-12-24
e276180647ab Activate check for unique ip connection limits Carl Byington <carl@five-ten-sg.com> parents: 279 diff changeset	60 Activate check for unique ip connection limits.
e276180647ab Activate check for unique ip connection limits Carl Byington <carl@five-ten-sg.com> parents: 279 diff changeset	61
279 3d894d09c198 add limits on unique ip addresses per hour per authenticated user Carl Byington <carl@five-ten-sg.com> parents: 278 diff changeset	62 6.37 2013-12-17
278 368572c57013 add limits on unique ip addresses per hour per authenticated user Carl Byington <carl@five-ten-sg.com> parents: 272 diff changeset	63 Add unique ip connection limits per authenticated id or email address.
368572c57013 add limits on unique ip addresses per hour per authenticated user Carl Byington <carl@five-ten-sg.com> parents: 272 diff changeset	64
272 a99b6c1f5f67 Code cleanup, increase minimum hostname length for uribl checking Carl Byington <carl@five-ten-sg.com> parents: 270 diff changeset	65 6.36 2013-09-09
a99b6c1f5f67 Code cleanup, increase minimum hostname length for uribl checking Carl Byington <carl@five-ten-sg.com> parents: 270 diff changeset	66 Code cleanup, increase minimum hostname length for uribl checking.
a99b6c1f5f67 Code cleanup, increase minimum hostname length for uribl checking Carl Byington <carl@five-ten-sg.com> parents: 270 diff changeset	67
270 f92f24950bd3 Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists Carl Byington <carl@five-ten-sg.com> parents: 268 diff changeset	68 6.35 2013-09-09
f92f24950bd3 Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists Carl Byington <carl@five-ten-sg.com> parents: 268 diff changeset	69 Use mozilla prefix list for tld checking.
f92f24950bd3 Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists Carl Byington <carl@five-ten-sg.com> parents: 268 diff changeset	70 Enable surbl/uribl/dbl rhs lists.
f92f24950bd3 Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists Carl Byington <carl@five-ten-sg.com> parents: 268 diff changeset	71
268 f941563c2a95 Add require_rdns checking Carl Byington <carl@five-ten-sg.com> parents: 264 diff changeset	72 6.34 2013-05-22
f941563c2a95 Add require_rdns checking Carl Byington <carl@five-ten-sg.com> parents: 264 diff changeset	73 Add require_rdns checking.
f941563c2a95 Add require_rdns checking Carl Byington <carl@five-ten-sg.com> parents: 264 diff changeset	74
264 56f55547b120 fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering Carl Byington <carl@five-ten-sg.com> parents: 260 diff changeset	75 6.33 2012-07-21
56f55547b120 fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering Carl Byington <carl@five-ten-sg.com> parents: 260 diff changeset	76 Fix unauthenticated rate limit bug for empty mail from.
56f55547b120 fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering Carl Byington <carl@five-ten-sg.com> parents: 260 diff changeset	77 Move unauthenticated rate limit checks after spam filtering.
56f55547b120 fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering Carl Byington <carl@five-ten-sg.com> parents: 260 diff changeset	78
260 7c05043a220e add recipient rate limits by email from address or domain Carl Byington <carl@five-ten-sg.com> parents: 257 diff changeset	79 6.32 2012-07-21
7c05043a220e add recipient rate limits by email from address or domain Carl Byington <carl@five-ten-sg.com> parents: 257 diff changeset	80 Allow rate limiting for unauthentication connections by mail
7c05043a220e add recipient rate limits by email from address or domain Carl Byington <carl@five-ten-sg.com> parents: 257 diff changeset	81 from address or domain.
7c05043a220e add recipient rate limits by email from address or domain Carl Byington <carl@five-ten-sg.com> parents: 257 diff changeset	82
257 d11b529ce9c5 Fix uribl lookups on client dns name, need to strip the ip address in brackets Carl Byington <carl@five-ten-sg.com> parents: 255 diff changeset	83 6.31 2012-07-01
d11b529ce9c5 Fix uribl lookups on client dns name, need to strip the ip address in brackets Carl Byington <carl@five-ten-sg.com> parents: 255 diff changeset	84 Fix uribl lookups on client dns name, need to strip the ip
d11b529ce9c5 Fix uribl lookups on client dns name, need to strip the ip address in brackets Carl Byington <carl@five-ten-sg.com> parents: 255 diff changeset	85 address in brackets.
d11b529ce9c5 Fix uribl lookups on client dns name, need to strip the ip address in brackets Carl Byington <carl@five-ten-sg.com> parents: 255 diff changeset	86
255 d6d5c50b9278 Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits. Carl Byington <carl@five-ten-sg.com> parents: 249 diff changeset	87 6.30 2012-04-09
d6d5c50b9278 Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits. Carl Byington <carl@five-ten-sg.com> parents: 249 diff changeset	88 Allow dnswl_list and dnsbl_list to be empty, to override lists
d6d5c50b9278 Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits. Carl Byington <carl@five-ten-sg.com> parents: 249 diff changeset	89 specified in the ancestor contexts.
d6d5c50b9278 Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits. Carl Byington <carl@five-ten-sg.com> parents: 249 diff changeset	90 Add daily recipient limits as a multiple of the hourly limits.
d6d5c50b9278 Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits. Carl Byington <carl@five-ten-sg.com> parents: 249 diff changeset	91
249 15bf4f68a0b2 Add dnswl support Carl Byington <carl@five-ten-sg.com> parents: 246 diff changeset	92 6.29 2012-04-08
15bf4f68a0b2 Add dnswl support Carl Byington <carl@five-ten-sg.com> parents: 246 diff changeset	93 Add dnswl support.
15bf4f68a0b2 Add dnswl support Carl Byington <carl@five-ten-sg.com> parents: 246 diff changeset	94
246 8b0f16abee53 Add prvs decoding to envelope addresses Carl Byington <carl@five-ten-sg.com> parents: 244 diff changeset	95 6.28 2011-09-30
8b0f16abee53 Add prvs decoding to envelope addresses Carl Byington <carl@five-ten-sg.com> parents: 244 diff changeset	96 Add prvs decoding to envelope addresses.
8b0f16abee53 Add prvs decoding to envelope addresses Carl Byington <carl@five-ten-sg.com> parents: 244 diff changeset	97
244 ef97c7cd4a6e const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions Carl Byington <carl@five-ten-sg.com> parents: 242 diff changeset	98 6.27 2011-08-15
ef97c7cd4a6e const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions Carl Byington <carl@five-ten-sg.com> parents: 242 diff changeset	99 const correctness fixes from new gcc
ef97c7cd4a6e const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions Carl Byington <carl@five-ten-sg.com> parents: 242 diff changeset	100
ef97c7cd4a6e const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions Carl Byington <carl@five-ten-sg.com> parents: 242 diff changeset	101 6.26 2010-11-19
242 d8ee4c97b9ab 64 bit fixes for libresolv.a Carl Byington <carl@five-ten-sg.com> parents: 236 diff changeset	102 64 bit fixes for libresolv.a
d8ee4c97b9ab 64 bit fixes for libresolv.a Carl Byington <carl@five-ten-sg.com> parents: 236 diff changeset	103
236 c0d2e99c0a1d Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name Carl Byington <carl@five-ten-sg.com> parents: 235 diff changeset	104 6.25 2009-09-29
c0d2e99c0a1d Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name Carl Byington <carl@five-ten-sg.com> parents: 235 diff changeset	105 Add surbl checks on the smtp helo value, client reverse dns name,
c0d2e99c0a1d Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name Carl Byington <carl@five-ten-sg.com> parents: 235 diff changeset	106 and mail from domain name.
c0d2e99c0a1d Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name Carl Byington <carl@five-ten-sg.com> parents: 235 diff changeset	107
235 e6c66640f6f9 Add SRS decoding to envelope addresses Carl Byington <carl@five-ten-sg.com> parents: 233 diff changeset	108 6.24 2009-06-09
e6c66640f6f9 Add SRS decoding to envelope addresses Carl Byington <carl@five-ten-sg.com> parents: 233 diff changeset	109 Add SRS decoding to envelope addresses.
e6c66640f6f9 Add SRS decoding to envelope addresses Carl Byington <carl@five-ten-sg.com> parents: 233 diff changeset	110
233 5c3e9bf45bb5 Add whitelisting by regex expression filtering. Carl Byington <carl@five-ten-sg.com> parents: 231 diff changeset	111 6.23 2009-05-25
5c3e9bf45bb5 Add whitelisting by regex expression filtering. Carl Byington <carl@five-ten-sg.com> parents: 231 diff changeset	112 Add whitelisting by regex expression filtering.
5c3e9bf45bb5 Add whitelisting by regex expression filtering. Carl Byington <carl@five-ten-sg.com> parents: 231 diff changeset	113 Add queueid to whitelist extension log message.
5c3e9bf45bb5 Add whitelisting by regex expression filtering. Carl Byington <carl@five-ten-sg.com> parents: 231 diff changeset	114
230 ad38575e98ca Prevent auto whitelisting due to outgoing multipart/report delivery notifications. Carl Byington <carl@five-ten-sg.com> parents: 227 diff changeset	115 6.22 2009-05-08
ad38575e98ca Prevent auto whitelisting due to outgoing multipart/report delivery notifications. Carl Byington <carl@five-ten-sg.com> parents: 227 diff changeset	116 Prevent auto whitelisting due to outgoing multipart/report
ad38575e98ca Prevent auto whitelisting due to outgoing multipart/report delivery notifications. Carl Byington <carl@five-ten-sg.com> parents: 227 diff changeset	117 delivery notifications.
231 4d6bd04d93fa Fix memory leak in suppressed auto whitelisting. Carl Byington <carl@five-ten-sg.com> parents: 230 diff changeset	118 Fix memory leak in suppressed auto whitelisting.
230 ad38575e98ca Prevent auto whitelisting due to outgoing multipart/report delivery notifications. Carl Byington <carl@five-ten-sg.com> parents: 227 diff changeset	119
227 3fee608becbc Fixes to compile on old systems without memrchr or string::clear(). Carl Byington <carl@five-ten-sg.com> parents: 216 diff changeset	120 6.21 2009-01-03
3fee608becbc Fixes to compile on old systems without memrchr or string::clear(). Carl Byington <carl@five-ten-sg.com> parents: 216 diff changeset	121 Fixes to compile on old systems without memrchr or string::clear().
3fee608becbc Fixes to compile on old systems without memrchr or string::clear(). Carl Byington <carl@five-ten-sg.com> parents: 216 diff changeset	122 Fix bug in spamassassin interface trying to clear a string with
3fee608becbc Fixes to compile on old systems without memrchr or string::clear(). Carl Byington <carl@five-ten-sg.com> parents: 216 diff changeset	123 string::empty().
3fee608becbc Fixes to compile on old systems without memrchr or string::clear(). Carl Byington <carl@five-ten-sg.com> parents: 216 diff changeset	124
216 784030ac71f1 Never whitelist self addressed mail. Changes for Fedora 10 and const correctness. Carl Byington <carl@five-ten-sg.com> parents: 214 diff changeset	125 6.20 2008-12-27
784030ac71f1 Never whitelist self addressed mail. Changes for Fedora 10 and const correctness. Carl Byington <carl@five-ten-sg.com> parents: 214 diff changeset	126 Never whitelist self addressed mail. Spammers are once again
784030ac71f1 Never whitelist self addressed mail. Changes for Fedora 10 and const correctness. Carl Byington <carl@five-ten-sg.com> parents: 214 diff changeset	127 sending mail from A to A trying to get around filters. Changes
784030ac71f1 Never whitelist self addressed mail. Changes for Fedora 10 and const correctness. Carl Byington <carl@five-ten-sg.com> parents: 214 diff changeset	128 for Fedora 10 and const correctness.
784030ac71f1 Never whitelist self addressed mail. Changes for Fedora 10 and const correctness. Carl Byington <carl@five-ten-sg.com> parents: 214 diff changeset	129
214 82886d4dd71f Fixes to compile on Fedora 9 and for const correctness. Carl Byington <carl@five-ten-sg.com> parents: 211 diff changeset	130 6.19 2008-06-10
82886d4dd71f Fixes to compile on Fedora 9 and for const correctness. Carl Byington <carl@five-ten-sg.com> parents: 211 diff changeset	131 Fixes to compile on Fedora 9 and for const correctness.
82886d4dd71f Fixes to compile on Fedora 9 and for const correctness. Carl Byington <carl@five-ten-sg.com> parents: 211 diff changeset	132
211 4db1457cd11a Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context. Carl Byington <carl@five-ten-sg.com> parents: 203 diff changeset	133 6.18 2008-03-22
4db1457cd11a Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context. Carl Byington <carl@five-ten-sg.com> parents: 203 diff changeset	134 Extend auto-whitelisting when receiving mail even if the auto
4db1457cd11a Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context. Carl Byington <carl@five-ten-sg.com> parents: 203 diff changeset	135 whitelist is specified in a parent context. Fixes for Solaris from sm-archive.
4db1457cd11a Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context. Carl Byington <carl@five-ten-sg.com> parents: 203 diff changeset	136
203 92a5c866bdfa Verify from/to pairs even if they might be explicitly whitelisted. Carl Byington <carl@five-ten-sg.com> parents: 201 diff changeset	137 6.17 2008-03-04
92a5c866bdfa Verify from/to pairs even if they might be explicitly whitelisted. Carl Byington <carl@five-ten-sg.com> parents: 201 diff changeset	138 Verify from/to pairs even if they might be explicitly whitelisted.
92a5c866bdfa Verify from/to pairs even if they might be explicitly whitelisted. Carl Byington <carl@five-ten-sg.com> parents: 201 diff changeset	139 Document DCC greylisting and bulk detection usage. Fix DCC bulk
92a5c866bdfa Verify from/to pairs even if they might be explicitly whitelisted. Carl Byington <carl@five-ten-sg.com> parents: 201 diff changeset	140 thresholds of many. Update spec file for fedora packaging.
92a5c866bdfa Verify from/to pairs even if they might be explicitly whitelisted. Carl Byington <carl@five-ten-sg.com> parents: 201 diff changeset	141
201 752d4315675c add reference to mercurial repository in the documentation Carl Byington <carl@five-ten-sg.com> parents: 195 diff changeset	142 6.16 2008-02-02
752d4315675c add reference to mercurial repository in the documentation Carl Byington <carl@five-ten-sg.com> parents: 195 diff changeset	143 Switch to Mercurial source control.
98 91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	144
195 797299e9fffc fix null dereference if missing _ macro carl parents: 192 diff changeset	145 6.15 2007-12-07
797299e9fffc fix null dereference if missing _ macro carl parents: 192 diff changeset	146 Fix null pointer dereference if macro _ not passed to this milter.
797299e9fffc fix null dereference if missing _ macro carl parents: 192 diff changeset	147 Default sendmail config passes that in the connect call.
797299e9fffc fix null dereference if missing _ macro carl parents: 192 diff changeset	148
192 8f4a9a37d4d9 delay autowhitelisting to avoid out of office reply bots carl parents: 190 diff changeset	149 6.14 2007-11-11
8f4a9a37d4d9 delay autowhitelisting to avoid out of office reply bots carl parents: 190 diff changeset	150 Delay auto whitelisting until we see the headers, to prevent
8f4a9a37d4d9 delay autowhitelisting to avoid out of office reply bots carl parents: 190 diff changeset	151 auto whitelisting due to bulk out of office reply bots.
8f4a9a37d4d9 delay autowhitelisting to avoid out of office reply bots carl parents: 190 diff changeset	152
187 f0eda59e8afd fix null pointer dereference from missing HELO command carl parents: 185 diff changeset	153 6.13 2007-11-10
f0eda59e8afd fix null pointer dereference from missing HELO command carl parents: 185 diff changeset	154 HELO command is optional, and if missing caused a null pointer
190 004b855c6c1f fix null pointer dereference from missing HELO command carl parents: 189 diff changeset	155 dereference. Use smfi_progress in libmilter if it is available.
187 f0eda59e8afd fix null pointer dereference from missing HELO command carl parents: 185 diff changeset	156
185 505283ab296c smtp rejections take precendence over greylisting carl parents: 184 diff changeset	157 6.12 2007-10-13
505283ab296c smtp rejections take precendence over greylisting carl parents: 184 diff changeset	158 SMTP rejections take precedence over greylisting.
505283ab296c smtp rejections take precendence over greylisting carl parents: 184 diff changeset	159
184 0e15a805d295 embedded dcc filtering carl parents: 179 diff changeset	160 6.11 2007-10-07
178 d6531c702be3 embedded dcc filtering carl parents: 177 diff changeset	161 Add DCC filtering via dccifd. Drop to 60 seconds the time we will
d6531c702be3 embedded dcc filtering carl parents: 177 diff changeset	162 keep idle smtp verify sockets around. This needs to be about half
d6531c702be3 embedded dcc filtering carl parents: 177 diff changeset	163 the value of confTO_COMMAND configured on the verify targets.
d6531c702be3 embedded dcc filtering carl parents: 177 diff changeset	164 Fix potential race condition or buffer overflow caused by static
d6531c702be3 embedded dcc filtering carl parents: 177 diff changeset	165 buffer referenced by multiple threads.
177 a4d313c2460b start embedded dcc filtering carl parents: 176 diff changeset	166
174 da0c41b9f672 don't whitelist addresses with embedded spaces carl parents: 173 diff changeset	167 6.10 2007-09-23
da0c41b9f672 don't whitelist addresses with embedded spaces carl parents: 173 diff changeset	168 Don't whitelist addresses with embedded blanks, or the empty
176 4ec928b24bab allow manual whitelisting with stamp 1 to remove a whitelist entry carl parents: 174 diff changeset	169 path. Allow manual removal of auto whitelist entries.
174 da0c41b9f672 don't whitelist addresses with embedded spaces carl parents: 173 diff changeset	170
173 83fe0be032c1 fix leak, update timestamps when receiving auto-whitelisted sender carl parents: 172 diff changeset	171 6.09 2007-09-06
83fe0be032c1 fix leak, update timestamps when receiving auto-whitelisted sender carl parents: 172 diff changeset	172 Fix memory leak in auto-whitelisting code. Update auto-whitelist
83fe0be032c1 fix leak, update timestamps when receiving auto-whitelisted sender carl parents: 172 diff changeset	173 timestamps when receiving mail from auto-whitelisted senders.
83fe0be032c1 fix leak, update timestamps when receiving auto-whitelisted sender carl parents: 172 diff changeset	174
172 d3189495ec68 don't do generic rdns filtering on whitelisted recipients carl parents: 169 diff changeset	175 6.08 2007-08-30
d3189495ec68 don't do generic rdns filtering on whitelisted recipients carl parents: 169 diff changeset	176 Don't do generic reverse dns filtering on authenticated connections.
d3189495ec68 don't do generic rdns filtering on whitelisted recipients carl parents: 169 diff changeset	177
168 6bac960af6b4 add generic reverse dns filtering regex carl parents: 167 diff changeset	178 6.07 2007-08-30
6bac960af6b4 add generic reverse dns filtering regex carl parents: 167 diff changeset	179 Add generic reverse dns filtering with regular expression.
169 44021d570958 fix pre/post scripts in rpm spec file carl parents: 168 diff changeset	180 Fix pre/post scripts in the rpm spec file.
168 6bac960af6b4 add generic reverse dns filtering regex carl parents: 167 diff changeset	181
6bac960af6b4 add generic reverse dns filtering regex carl parents: 167 diff changeset	182 6.06 2007-08-27
167 9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it. carl parents: 165 diff changeset	183 Fix bug that effectively disabled spamassassin filtering. Improve
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it. carl parents: 165 diff changeset	184 spamassassin filtering documentation. Generate warning if the
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it. carl parents: 165 diff changeset	185 config file specifies spam assassin filtering, but spamc is not
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it. carl parents: 165 diff changeset	186 found by autoconf.
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it. carl parents: 165 diff changeset	187
168 6bac960af6b4 add generic reverse dns filtering regex carl parents: 167 diff changeset	188 6.05 2007-08-26
165 bf828f785407 fix unitialized variable carl parents: 162 diff changeset	189 Fix unitialized variable in my spamassassin code.
bf828f785407 fix unitialized variable carl parents: 162 diff changeset	190
168 6bac960af6b4 add generic reverse dns filtering regex carl parents: 167 diff changeset	191 6.04 2007-08-26
165 bf828f785407 fix unitialized variable carl parents: 162 diff changeset	192 Add spamassassin integration via spamc, code from spamass-milter.
bf828f785407 fix unitialized variable carl parents: 162 diff changeset	193
162 c4bce911c276 don't add auto whitelist for A to A carl parents: 160 diff changeset	194 6.03 2007-07-14
c4bce911c276 don't add auto whitelist for A to A carl parents: 160 diff changeset	195 Don't add auto whitelist entries for our own domains.
c4bce911c276 don't add auto whitelist for A to A carl parents: 160 diff changeset	196
160 b3ed72ee6564 allow manual updates to auto whitelist files carl parents: 152 diff changeset	197 6.02 2007-07-10
b3ed72ee6564 allow manual updates to auto whitelist files carl parents: 152 diff changeset	198 Allow manual updates to the auto whitelisting files, mainly for
b3ed72ee6564 allow manual updates to auto whitelist files carl parents: 152 diff changeset	199 scp or rsync synchronization between primary and backup mx
b3ed72ee6564 allow manual updates to auto whitelist files carl parents: 152 diff changeset	200 systems.
b3ed72ee6564 allow manual updates to auto whitelist files carl parents: 152 diff changeset	201
152 c7fc218686f5 gpl3, block mail to recipients that cannot reply carl parents: 151 diff changeset	202 6.01 2007-07-07
c7fc218686f5 gpl3, block mail to recipients that cannot reply carl parents: 151 diff changeset	203 GPL3. Block mail to recipients that cannot reply. Start auto
c7fc218686f5 gpl3, block mail to recipients that cannot reply carl parents: 151 diff changeset	204 whitelisting.
c7fc218686f5 gpl3, block mail to recipients that cannot reply carl parents: 151 diff changeset	205
c7fc218686f5 gpl3, block mail to recipients that cannot reply carl parents: 151 diff changeset	206 5.30 2007-06-09
c7fc218686f5 gpl3, block mail to recipients that cannot reply carl parents: 151 diff changeset	207 Selinux fix - redirect stdout for useradd to make selinux happy.
c7fc218686f5 gpl3, block mail to recipients that cannot reply carl parents: 151 diff changeset	208
151 0e8ec3c483ce limit dns resolver timeouts and retry interval carl parents: 150 diff changeset	209 5.29 2007-03-27
150 a23ef169d322 limit dns resolver timeouts and retry interval carl parents: 149 diff changeset	210 Limit dns resolver to two retries five seconds apart.
a23ef169d322 limit dns resolver timeouts and retry interval carl parents: 149 diff changeset	211
149 9581f6e62574 switch to second context wins in all cases carl parents: 148 diff changeset	212 5.28 2007-02-19
9581f6e62574 switch to second context wins in all cases carl parents: 148 diff changeset	213 Change the conflict resolution algorithm to "second one wins" if we
9581f6e62574 switch to second context wins in all cases carl parents: 148 diff changeset	214 have two contexts that both define env_to user@. Update ICANN tld
9581f6e62574 switch to second context wins in all cases carl parents: 148 diff changeset	215 list.
9581f6e62574 switch to second context wins in all cases carl parents: 148 diff changeset	216
148 9330b8d6a56b add documentation fixes, allow env_from target of inherit carl parents: 147 diff changeset	217 5.27 2007-01-30
9330b8d6a56b add documentation fixes, allow env_from target of inherit carl parents: 147 diff changeset	218 Allow 'inherit' as an env_from target. Documentation cleanup
9330b8d6a56b add documentation fixes, allow env_from target of inherit carl parents: 147 diff changeset	219 from G.W. Haywood.
9330b8d6a56b add documentation fixes, allow env_from target of inherit carl parents: 147 diff changeset	220
147 812c80305f26 fix 5.23 bug and add fsa debug logging carl parents: 145 diff changeset	221 5.26 2006-12-04
812c80305f26 fix 5.23 bug and add fsa debug logging carl parents: 145 diff changeset	222 Fix bug in content filtering introduced in 5.23 that prevented
812c80305f26 fix 5.23 bug and add fsa debug logging carl parents: 145 diff changeset	223 seeing any host names in the body.
812c80305f26 fix 5.23 bug and add fsa debug logging carl parents: 145 diff changeset	224
145 9b9bab1d3c21 dump effective dnsbl_list with -c switch carl parents: 144 diff changeset	225 5.25 2006-10-15
9b9bab1d3c21 dump effective dnsbl_list with -c switch carl parents: 144 diff changeset	226 DNSBL lists are inherited, so dump the effective list with the
9b9bab1d3c21 dump effective dnsbl_list with -c switch carl parents: 144 diff changeset	227 -c switch.
9b9bab1d3c21 dump effective dnsbl_list with -c switch carl parents: 144 diff changeset	228
144 31ff00ea6bfb allow parent/child to share a fully qualified env_to address carl parents: 143 diff changeset	229 5.24 2006-10-15
31ff00ea6bfb allow parent/child to share a fully qualified env_to address carl parents: 143 diff changeset	230 Allow child and parent context to specify the same fully qualified
31ff00ea6bfb allow parent/child to share a fully qualified env_to address carl parents: 143 diff changeset	231 env_to address. Only dump the rate limit for the default context
31ff00ea6bfb allow parent/child to share a fully qualified env_to address carl parents: 143 diff changeset	232 with -c switch.
31ff00ea6bfb allow parent/child to share a fully qualified env_to address carl parents: 143 diff changeset	233
143 ecb40aa3eaa5 require two periods for ip addresses carl parents: 140 diff changeset	234 5.23 2006-10-10
ecb40aa3eaa5 require two periods for ip addresses carl parents: 140 diff changeset	235 Require two periods in ip addresses.
ecb40aa3eaa5 require two periods for ip addresses carl parents: 140 diff changeset	236
140 4028de9b46dd cleanup smtp rate limit code carl parents: 136 diff changeset	237 5.22 2006-09-27
4028de9b46dd cleanup smtp rate limit code carl parents: 136 diff changeset	238 Change syntax for default rate limit. Improve hourly reset of
4028de9b46dd cleanup smtp rate limit code carl parents: 136 diff changeset	239 limits. Warning for rate limits in non default contexts to allow
4028de9b46dd cleanup smtp rate limit code carl parents: 136 diff changeset	240 nesting of client configurations.
4028de9b46dd cleanup smtp rate limit code carl parents: 136 diff changeset	241
136 f4746d8a12a3 add smtp auth rate limits carl parents: 134 diff changeset	242 5.21 2006-09-26
f4746d8a12a3 add smtp auth rate limits carl parents: 134 diff changeset	243 Add SMTP AUTH recipient rate limits, to help throttle infected
f4746d8a12a3 add smtp auth rate limits carl parents: 134 diff changeset	244 client machines and accounts with weak cracked passwords.
f4746d8a12a3 add smtp auth rate limits carl parents: 134 diff changeset	245
134 f9917ce924a3 all dns lookups fully qualified, my_read() bug fix carl parents: 133 diff changeset	246 5.20 2006-08-02
f9917ce924a3 all dns lookups fully qualified, my_read() bug fix carl parents: 133 diff changeset	247 Fully qualify all dns lookups. Fix my_read() bug. Try to convert
f9917ce924a3 all dns lookups fully qualified, my_read() bug fix carl parents: 133 diff changeset	248 names that might be ip addresses via inet_aton before doing dns
f9917ce924a3 all dns lookups fully qualified, my_read() bug fix carl parents: 133 diff changeset	249 lookups.
f9917ce924a3 all dns lookups fully qualified, my_read() bug fix carl parents: 133 diff changeset	250
131 df355d117199 uribl lookups fully qualified; allow two component host names carl parents: 128 diff changeset	251 5.19 2006-08-01
df355d117199 uribl lookups fully qualified; allow two component host names carl parents: 128 diff changeset	252 Bug fix - add trailing dot to uribl dns lookups to make them fully
df355d117199 uribl lookups fully qualified; allow two component host names carl parents: 128 diff changeset	253 qualified. Check host names with only two components, since
df355d117199 uribl lookups fully qualified; allow two component host names carl parents: 128 diff changeset	254 spammers are now using bare http://domain.tld references.
133 b8ce1b31237d uribl lookups fully qualified; allow two component host names carl parents: 131 diff changeset	255 Spec file now creates an rpm that properly creates the dnsbl user.
131 df355d117199 uribl lookups fully qualified; allow two component host names carl parents: 128 diff changeset	256
128 9ab51896447f don't do uribl lookups on rfc1918 address space carl parents: 127 diff changeset	257 5.18 2006-04-27
127 2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes carl parents: 126 diff changeset	258 Bug fix - newer sendmail versions don't guarantee envelope addresses
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes carl parents: 126 diff changeset	259 enclosed in <> wrapper.
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes carl parents: 126 diff changeset	260
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes carl parents: 126 diff changeset	261 Document backscatter prevention configuration for systems that are
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes carl parents: 126 diff changeset	262 used to mainly spam filter and then forward to mail to the internal
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes carl parents: 126 diff changeset	263 server.
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes carl parents: 126 diff changeset	264
128 9ab51896447f don't do uribl lookups on rfc1918 address space carl parents: 127 diff changeset	265 Never ask uribl blacklists about rfc1918 address space.
9ab51896447f don't do uribl lookups on rfc1918 address space carl parents: 127 diff changeset	266
126 05ae49d37896 don't do dnsbl lookups on rfc1918 address space carl parents: 125 diff changeset	267 5.17 2006-03-25
127 2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes carl parents: 126 diff changeset	268 Never ask dns blacklists about rfc1918 address space.
126 05ae49d37896 don't do dnsbl lookups on rfc1918 address space carl parents: 125 diff changeset	269
125 8b1562482b29 put hostname in smtp message for uribl style lookups carl parents: 123 diff changeset	270 5.16 2006-03-16
127 2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes carl parents: 126 diff changeset	271 Bug fix - the smtp error message for uribl filtering needs to
125 8b1562482b29 put hostname in smtp message for uribl style lookups carl parents: 123 diff changeset	272 reference the host name, not the ip address.
8b1562482b29 put hostname in smtp message for uribl style lookups carl parents: 123 diff changeset	273
123 ecd97e7eb1f0 properly return error code with reject reason carl parents: 122 diff changeset	274 5.15 2006-03-15
127 2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes carl parents: 126 diff changeset	275 Bug fix - we failed to properly set the return code to indicate the
123 ecd97e7eb1f0 properly return error code with reject reason carl parents: 122 diff changeset	276 reason when rejecting mail for content filtering.
ecd97e7eb1f0 properly return error code with reject reason carl parents: 122 diff changeset	277
122 e8971c595845 fix typo in multi.surbl.org name carl parents: 121 diff changeset	278 5.14 2006-03-13
127 2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes carl parents: 126 diff changeset	279 Fix a typo in the default config file and documentation for using
122 e8971c595845 fix typo in multi.surbl.org name carl parents: 121 diff changeset	280 multi.surbl.org
e8971c595845 fix typo in multi.surbl.org name carl parents: 121 diff changeset	281
117 aa07452e641b uribl patch from Jeff Evans <jeffe@tricab.com> carl parents: 116 diff changeset	282 5.13 2006-03-12
aa07452e641b uribl patch from Jeff Evans <jeffe@tricab.com> carl parents: 116 diff changeset	283 patch from Jeff Evans <jeffe@tricab.com>
121 e2506138561b uribl patch from Jeff Evans <jeffe@tricab.com> carl parents: 117 diff changeset	284 add SURBL/URIBL lookups, remove trailing dots from hostnames,
e2506138561b uribl patch from Jeff Evans <jeffe@tricab.com> carl parents: 117 diff changeset	285 allow ip address literals as hostnames.
e2506138561b uribl patch from Jeff Evans <jeffe@tricab.com> carl parents: 117 diff changeset	286 add configuration for surbl/uribl list and reject message
e2506138561b uribl patch from Jeff Evans <jeffe@tricab.com> carl parents: 117 diff changeset	287
115 07e5d4721213 use larger resolver buffer carl parents: 113 diff changeset	288 5.12 2006-01-08
07e5d4721213 use larger resolver buffer carl parents: 113 diff changeset	289 Use larger resolver buffer to accomodate spammers with many name
07e5d4721213 use larger resolver buffer carl parents: 113 diff changeset	290 servers. A current example is life-all.com which needs to retry in
07e5d4721213 use larger resolver buffer carl parents: 113 diff changeset	291 tcp mode to fetch the 1444 byte response.
07e5d4721213 use larger resolver buffer carl parents: 113 diff changeset	292
116 0094678a16d0 update all systems from tarball, make chkconfig creates dnsbl user if needed carl parents: 115 diff changeset	293 'make chkconfig' now creates the dnsbl user if it does not exist.
0094678a16d0 update all systems from tarball, make chkconfig creates dnsbl user if needed carl parents: 115 diff changeset	294
113 a893afee4b80 move to autoconf/automake/docbook carl parents: 102 diff changeset	295 5.11 2005-12-20
a893afee4b80 move to autoconf/automake/docbook carl parents: 102 diff changeset	296 switch to autoconf/automake/docbook
a893afee4b80 move to autoconf/automake/docbook carl parents: 102 diff changeset	297
102 d9c64bafbf60 fix compile error on fc3 carl parents: 101 diff changeset	298 5.10 2005-10-16
d9c64bafbf60 fix compile error on fc3 carl parents: 101 diff changeset	299 Fix a compile error on Fedora Core 3.
d9c64bafbf60 fix compile error on fc3 carl parents: 101 diff changeset	300 Discovered by Nigel Horne <njh@bandsman.co.uk>
d9c64bafbf60 fix compile error on fc3 carl parents: 101 diff changeset	301
101 6ac7ba4a8312 fix <> passed as <<>> to verification hosts carl parents: 100 diff changeset	302 5.9 2005-09-26
6ac7ba4a8312 fix <> passed as <<>> to verification hosts carl parents: 100 diff changeset	303 Fix a bug with empty return paths passed to the verification code.
6ac7ba4a8312 fix <> passed as <<>> to verification hosts carl parents: 100 diff changeset	304 That resulted in 'MAIL FROM:<<>>' being sent to the verification
6ac7ba4a8312 fix <> passed as <<>> to verification hosts carl parents: 100 diff changeset	305 mail server.
6ac7ba4a8312 fix <> passed as <<>> to verification hosts carl parents: 100 diff changeset	306
100 63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts carl parents: 99 diff changeset	307 5.8 2005-09-25
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts carl parents: 99 diff changeset	308 Allow empty env_to at global context level to remove restrictions
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts carl parents: 99 diff changeset	309 on env_to values in child contexts.
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts carl parents: 99 diff changeset	310
99 f8963ddf7143 failed to return a value from parse_verify() carl parents: 98 diff changeset	311 5.7 2005-09-23
f8963ddf7143 failed to return a value from parse_verify() carl parents: 98 diff changeset	312 Failed to return a value from parse_verify() which caused failures
f8963ddf7143 failed to return a value from parse_verify() carl parents: 98 diff changeset	313 to load the configuration.
f8963ddf7143 failed to return a value from parse_verify() carl parents: 98 diff changeset	314
98 91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	315 5.6 2005-09-22
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	316 Tokenizer errors now go thru the syslog code, so they are visible
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	317 when generated during config file reloads during normal operation.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	318
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	319 5.5 2005-09-21
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	320 Cleanup debug logging. Verify from/to pairs now remembers the last
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	321 from value sent to the remote server to prevent unnecessary rset
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	322 commands.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	323
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	324 5.4 2005-09-18
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	325 Add verify statement to specify the smtp host to be used to verify
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	326 envelope from / recipient pairs.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	327
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	328 Authenticated clients are now exempt from all white/black listing
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	329 in addition to the dnsbl lookups.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	330
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	331 dcc_to should not look at substitute mail_host. That is only used
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	332 by dcc_from.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	333
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	334 5.3 2005-08-07
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	335 Properly quit if the config file has syntax errors on startup. Send
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	336 mail to root if the config file needs to be reloaded since it was
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	337 modified, but contains syntax errors. In this case, we continue to
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	338 use the old configuration.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	339
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	340 5.2 2005-08-02
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	341 Patch from Stephen Johnson <stephen.johnson@arkansas.gov> fixing the
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	342 lack of a default return value in CONTEXT::acceptable_content().
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	343
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	344 5.1 2005-07-20
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	345 Add multiple syslog debug levels. Detect and silently remove
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	346 duplicate DNSBL definitions. That allows us to accept mail to
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	347 recipients in multiple domains that use the same blacklist and yet
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	348 only check that blacklist once. This may happen when your config
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	349 file directly includes as child contexts the config files used on
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	350 your clients mail servers.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	351
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	352 5.0 2005-07-16
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	353 Major changes to the syntax of the config file. Content filtering
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	354 is no longer a global mail server setting.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	355
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	356 4.6 2005-04-02
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	357 Fix enum compilation error on Fedora Core 3.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	358 Discovered by Nigel Horne <njh@bandsman.co.uk>
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	359
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	360 Remove bad html tag command from the default conf file. Spammers
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	361 seem to have abandoned this.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	362
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	363 Add toolbar.msn.click-url.com in hosts-ignore.conf. These are all
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	364 commented, but you might want to uncomment them.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	365
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	366 4.5 2005-01-22
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	367 Add uuencode decoding for old style attachments.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	368
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	369 4.4 2005-01-18
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	370 Bug fix in forked process termination that left zombies.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	371
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	372 4.3 2005-01-16
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	373 Only keep 20% of the resolver sockets in the ready pool.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	374
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	375 4.2 2005-01-08
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	376 Use the separate resolver processes even if we don't have the
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	377 resolver interfaces and need gethostbyname.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	378
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	379 4.1 2005-01-06
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	380 Use a local unix domain socket for the resolver process
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	381 communication, rather than a tcp/ip socket.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	382
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	383 4.0 2005-01-03
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	384 Initialize the thread mutex objects early, before they are needed
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	385 by possible calls to my_syslog.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	386
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	387 Fork off a separate resolver listener process, so we can do multiple
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	388 dns operations in parallel. For each simultaneous inbound email,
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	389 we have a separate sendmail process, a milter thread, and a dns
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	390 resolver process.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	391
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	392 3.7 2004-10-28
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	393 Added an 'ignore' command to the conf file, used to ignore some
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	394 hosts that might end up on the SBL and otherwise trip the content
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	395 scanning filter. In particular, many recent Microsoft Word
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	396 documents contain the string www.5iantlavalamp.com which is
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	397 associated with their smart tags stuff. That is currently hosted at
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	398 216.168.224.70, which is shared with a site that ended up on the
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	399 SBL.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	400
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	401 3.6 2004-09-08
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	402 Contributions from Dan Harkless <software@harkless.org>
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	403 Better documentation for disabling the content filtering.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	404 Don't bother looking at the body text if we are not doing
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	405 content filtering.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	406
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	407 3.5 2004-07-17
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	408 Extend the error message for content filtering when the NS record
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	409 points to an ip address on the SBL. Include the original host name
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	410 that referenced that NS name.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	411
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	412
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	413 3.4 2004-07-15
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	414 Tokens with two consecutive periods cannot be ip addresses or host
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	415 names.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	416
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	417 Updated dnsbl.spec file for building rpms from John Gunkel.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	418
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	419
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	420 3.3 2004-07-09
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	421 Drop root priviledges properly, including the group id.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	422
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	423
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	424 3.2 2004-07-09
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	425
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	426 Contributions from John Gunkel <jgunkel@palliser.ca>:
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	427 Add .spec file for building rpms, contributed by John Gunkel
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	428
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	429 Changes to file layout to conform to RedHat/LSB standards.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	430
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	431 Add some html (actually xml) tags used by Apple mac print
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	432 subsystem that were tripping the html tag detector.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	433
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	434 Help with changes required to allow dnsbl to drop root
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	435 priviledges. Move the socket to /var/run/dnsbl/dnsbl.sock
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	436
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	437 Change parser to handle &#xnnn; obfuscated urls with charaters
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	438 specified in hex.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	439
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	440 Make bad_html tags more sensitive to binary tags, to reduce false
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	441 positives in .zip or .tar.gz file attachments.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	442
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	443 Add sendmail queueid to the dnsbl syslog messages.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	444
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	445 Fix one place where host names were not forced to lower case.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	446 Discovered by Nigel Horne <njh@bandsman.co.uk>
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	447
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	448 Remove duplicate dns queries within the same smtp transaction from
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	449 the body content filtering. This helps if the mail server does not
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	450 have a nearby caching dns server.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	451
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	452 Add host_soft_limit config keyword. Use only one of host_limit or
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	453 host_soft_limit, since the last one wins. The host_limit is a hard
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	454 upper limit on the number of host names in a message. The
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	455 host_soft_limit allows unlimited host names, but only checks a
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	456 random sample of them against the dnsbl.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	457
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	458 The main thread has dropped root priviledges, but other threads
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation carl parents: 92 diff changeset	459 are still running as root. This needs to be fixed.

Mercurial > dnsbl

annotate ChangeLog @ 412:e63c6b4835ef stable-6-0-56