p5-Mail-SpamAssassin-2.50.
That port update may have been ill-advised so close to a ports freeze,
but this new version of the exiscan patch is backward compatible to
the original protocol, so if the maintainer of p5-Mail-SpamAssassin
rolls back, this port will not require a change.
Bump PORTREVISION accordingly.
Requested by: "David Haworth" <dave@fyonn.net>
+ Reverts non-backward compatible change in output handling of
CLI AV scanners.
+ Makes a number of options expandable, allowing lookups to determine
their values.
+ Fixes various edge case bugs.
+ Adds MKS AV daemon support.
* Bump PORTREVISION accordingly.
and incorporates a lot of fixes.
WARNING, this version of exiscan is not entirely backward-compatible
with the previous one:
* The following configuration options have been replaced with
compile-time definitions and thus must be removed from your
Exim configure file if specified there:
exiscan_spamd_buffer_max_chunks
exiscan_spamd_buffer_init_chunk
exiscan_av_buffer_max_chunks
exiscan_av_buffer_init_chunk
* Because of changes in the way MIME handling is implemented,
the following should be added to the Exim configure file to
maintain the original behaviour (which was to unpack MIME
messages):
exiscan_demime_condition = 1
2) Fix handling of SIGCHLD in redirection processes, which resulted
in redirection processes vanishing.
3) Bump PORTREVISION accordingly.
simply fail the lookup.
This prevents Exim from creating hints files that it can't use when
its DBM method is DB 1.85 (the default).
Obtained from: author
For Exim, this includes an enormous number of fixes. Most of these are
for esoteric configurations, although if you're bitten by them, you're
bitten hard.
The fixes also include closing up a buffer overflow that is not believed
to be exploitable, and a format string vulnerability that was only
exploitable by an Exim admin user, but then provided root access.
For Eximon, this just rationalizes a patch we carried locally for ages.
has graciously agreed to make a bzip2 version of the exiscan distfile
available, so use that instead of the gzip version. This allows
us to remove the post-patch target and associated rubbish.
Bump PORTREVISION accordingly.
WITHOUT_DSEARCH to disable them.
2) Enable NIS lookups by default and provide WITHOUT_NIS to
disable them.
3) Bump PORTREVISION accordingly.
Submitted by: Matthew Byng-Maddick <mbm+freebsd@colondot.net> (1)
Requested by: Nicolas Kowalski <Nicolas.Kowalski@imag.fr> (2)
quality.
Move exim to exim-old for folks who need exim-3.xx, because the
configuration file for exim-4.xx is not backward compatible. Move
exim-devel to exim, removing NO_LATEST_LINK:
repo-copy exim -> exim-old
copy over exim-devel -> exim
retire exim-devel
Slave ports are intended for use with the exim port, as before, so they
now build and install for exim-4.xx.
in the configuration affecting the base system's MTA, the management
of multiple POST-INSTALL-NOTES files could easily become a nightmare.
Instead, use a single POST-INSTALL-NOTES file that includes instructions
that, at worst, suggest unnecessary but harmless changes.
While here, use bullets instead of a numbered list for the notes, so
that future deltas are easier to read.
Also, mention the 'daily_status_include_submit_mailq' periodic.conf(5)
knob, as reported in PR ports/38925.
PR: ports/38925
Submitted by: Pat Lashley <patl+freebsd@phoenix.volant.org>
by using an rc.d script to launch Exim, as was done before I took over
this port.
This seems to be the most popular approach, and is arguably the
simplest. Folks like me who attach some aesthetic value to using rc(8)
and mailer.conf(8) to launch Exim at startup time should know enough to
blow away the rc.d script and do things any way they please.
For now, use two versions of the POST-INSTALL-NOTES, the only
difference being that the one given to -CURRENT users suggests setting
sendmail_enable to 'NONE', while the one for -STABLE users suggests
'NO'.
When the databases/postgresql7 port was updated from postgresql-7.1.x to
postgresql-7.2, libpq-fe.h moved from PREFIX/include/pgsql to
PREFIX/include for reasons I can't figure out.
This applies a band-aid until I can get clarification from the postgresql
port maintainer <girgen@partitur.se>, but I think the port might be
"broken" in its placement of some header files.
Reported by: kris
Exim may be linked (MySQL) uses a startup script to add its library
path to the linker hints.
Explain the problem in POST-INSTALL-NOTES and provide a sample
startup script.
I think such packages should do away with the script and provide
POST-INSTALL-NOTES that encourage the operator to add the library
path to ldconfig_paths in /etc/rc.conf, but provide this work-around
anyway.
Reported by: Oliver Brandmueller <ob@e-Gitt.NET>
Most notable fixes include tightened string handling in a few
pathalogical cases that some people suspect might be exploitable, at
least in the form of a DoS.
Requested by: Randy Bush <randy@psg.com>
adding information important to operators of SMTP services used
by a number of Windows (and probably Unix) MUA packages.
This text has been approved by the author and will be included in
the next release of exim-4. Another release of exim-3.3x is not
expected.
This change is based on an explanation of SSL certificates attributed
below, but was not a direct submission. Errors are my own, etc.
Submitted by: terry
Message-Id: <3C3F3A93.C1ECF9B0@mindspring.com>
* Mostly incorporates patches already carried by the port.
* Fixes a vulnerability in pipe handling, which was not exposed
by the default configuration, but which could have been exposed
if the configuration were altered appropriately.
Use the newly added mailnull user, and the now well-established group
mail.
The use of compile-time defaults for these values is not required for
many sites, but are important for more exotic applications.
This ensures that the packages are useful to the widest audience
possible.
Build Exim with compile-time defaults for exim_user and exim_group.
Use the newly added mailnull user, and the now well-established group
mail.
The use of compile-time defaults for these values is not required for
many sites, but are important for more exotic applications.
This ensures that the packages are useful to the widest audience
possible.
Use the newly added mailnull user, and the now well-established group
mail.
The use of compile-time defaults for these values is not required for
many sites, but are important for more exotic applications.
This ensures that the packages are useful to the widest audience
possible.
the documentation by installing them.
Update the post-install notes to reflect the presence of the new
exim-doc-* ports for alternative documentation formats.
Bump PORTREVISION.
on pipeline input.
Bump PORTREVISION to reflect the change.
Obtained from: exim-users@exim.org
Message-Id: <Pine.SOL.4.33.0111131315260.9828-100000@virgo.cus.cam.ac.uk>
where SIG_IGN as the signal handler for SIGCHLD is bad. This is only
an issue when a significant number of messages is received via pipe
(e.g. with -bS) at a faster rate than they can be dealt with by parallel
delivery agents (e.g. -odqs).
Bump PORTREVISION to reflect the change.
Obtained from: exim-users@exim.org
Message-Id: Pine.SOL.4.33.0111021349170.19636-100000@virgo.cus.cam.ac.uk
* Move the contents of pkg-message into POST-INSTALL-NOTES, which
gets installed in the !NOPORTDOCS case for future reference.
* Refer to POST-INSTALL-NOTES from pkg-message in the !NOPORTDOCS
case. In the NOPORTDOCS case, use POST-INSTALL-NOTES as the
pkg-message.
to install and use Exim from the packages without having to install
XFree86.
* Remove a stale SEDLIST entry for BINOWN handling.
* Use LOCALBASE instead of PREFIX when referring to already installed
software.
* Use more strict pattern matching in SEDLIST.
Folks who want eximon (the Exim monitor) must now either build exim
or one of its slave ports with WITH_EXIMON defined or install the
standalone exim-monitor package.
- Fixes bug where setting local part to /dev/null without setting
file_transport caused Exim to crash.
- Other fixes do not apply to FreeBSD.
* Now that RELENG_4 has bzip2 in the base system, use the bz2
distfiles.
Incorporates the fixes for non-mapped IPv6 listening sockets.
Fixes unclosed MySQL connection bug in delivery subprocesses.
Better RFC compliance with respect to Resent-Subject and
Resent-Reply-To.
Fix handling of unset hostname for OpenLDAP2.
Drop an unclosed connection if more than 5 uncrecognized commands are
received.
Handle \t in fail messages properly.
Bite the bullet _now_ and use MTA user exim instead. This means that
only early adopters of Exim-3.31 are affected, rather than lots more
folks further down the line.
I still think mailnull is better, but nobody in the Exim community
agrees with me. :-)
Bump PORTREVISION as appropriate.
users.
Fix the call to bind() in daemon.c so that the correct addrlen is
passed for a IPv4 or IPv6 struct sockaddr. This fixes the problem
where an exim binary compiled for IPv6 support won't bind() to any IPv4
addresses. The author approves of this patch.
Now that exim+ipv6 works for non-ipv6 FreeBSD hosts, make IPv6 support
default and provide a WITHOUT_IPV6 knob for folks who don't want it.
Turn on WITHOUT_IPV6 for pre-KAME systems, to give RELENG_3 folks a
fighting chance.
* Define LDAP_LIB_TYPE conditionally so that the operator can override
it.
* Allow OPENLDAP1 (or UMICHIGAN) and OPENLDAP2 for LDAP_LIB_TYPE,
depending on the correct ports for each.
The default behaviour of the port is unchanged. However, this change
allows for an exim-ldap2 slave port, if desired, and limits LDAP lookup
types to those that can be supported by the FreeBSD ports tree.
utility supplied with Exim is intended for systems that don't have
something as nifty as newsyslog(8).
I'm tempted to remove the utility from the port/package, but this
delta to pkg-message is less controversial.
This is primarily a maintenance release, though there are a very small
number of functional additions.
This release does not address the "orphaned -D spool files" problem, but
to date this problem has not been observed on FreeBSD systems.
FreeBSD has shipped with mailwrapper(8), which facilitates the use of
drop-in replacements for sendmail. Retire exim.sh in favour of the
mailwrapper(8) approach.
Requested by: AMAKAWA Shuhei <sa264@cam.ac.uk>
mailwrapper, which facilitates drop-in replacements for sendmail.
Retire the exim.sh that was installed into ${PREFIX}/etc/rc.d/ to
start Exim, in favour of the mailwrapper approach.
A continuum in the history for this file isn't necessary. What _is_
important is the purpose of the patch today:
*) Changes the test used to determine whether a file should be installed
to cope with files which we "touch" to zero bytes for packaging
purposes.
*) Causes the configure file to be installed as a sample only. The
administrator needs to rename this file to "activate" exim.
*) Changes the invocation of make-info to be less prone to fail on
silly errors and fixes the info(1) titles so that, for example
``info exim'' actually enters the exim.info file.
Replace it with a patch against the distribution configure.default,
which changes as little as possible so that folks who are accustomed to
Exim on other platforms will not be astonished.
Install the file as configure.default instead of configure.sample, since
it's as close as damnit to the default Exim configuration file.
The only arguably unnecessary deviation from the default is:
* Accept SMTP relay from the loopback IP address. Too many applications
require this, and the window of abuse is arguably negligible.
``info exim'' would fail to descend into any of the 3 Exim info files
from the dir top branch.
While we're at it, add a pkg-message that
1) Points to the documentation
2) Explains how to get Exim started
run with a kernel that has had IPv6 ommitted from its configuration,
so I can't make this a default (yet).
* Remove crazy handling of exim.sh and replace it with something much
simpler and more sane. This allows non-root users to build, even if
they can't install (properly).
Since BSD UNIX still doesn't offer a user for running an MTA in a
sandbox the way many Linux distributions do, the Exim port uses
the traditional sandbox user for sendmail, called 'sendmail'.
Bump PORTREVISION accordingly.
files/Makefile) that's been a maintenance PITA for too long. Replace it
with a patch against EDITME, now that the sed rules that operate on it
are mostly sensible.
* Features enabled by default are disabled by defining
WITHOUT_FEATURE.
* Features disabled by default are enabled by defining
WITH_FEATURE.
Requested by: alex
AUTH_CRAM_MD5 and AUTH_PLAINTEXT support have nothing to do with PAM,
other than that all three can be used as authentication mechanisms
for SMTP AUTH.
Enable all three by default, so that the package includes them.
included in the package. Folks who don't want them can build Exim
as follows:
cd /path/to/ports/mail/exim
make WITH_MAILDIR=no WITH_MAILSTORE=no WITH_MBX=no
home directory is set to /nonexistent .
Not all systems encourage the use of /nonexistent as a home directory,
so this is not a change that should be incorporated into the Exim
distribution.
This change allows local deliveries into /var/mail for users with
no valid home directory.
mysql323-client installs libmysqlclient.so.10 (instead of
libmysqlclient.so.6).
mysql323-{client,server} are production quality, now (according to
MySQL AB at least).
options `start' and `stop' now (unless I have forgotten any). This allows
us to call the scripts from /etc/rc.shutdown with the correct option.
The (42 or so) ports that already DTRT before are unchanged.
Allow admins to start migrating to the new nomenclature for
failing addresses:
fail_soft -> pass
fail_hard -> fail
The queryprogram router should use the word decline
instead of fail.
New keyword timezone used to manipulate the TZ variable.
Bugfix release.
IPv6 support is compiled in. I can't test to see whether it works, and
got no feedback from a request for testing on the exim-users mailing
list.
Also added hooks for SMTP AUTH and PAM support, disabled by default
for now.
* This is small bugfix release over the last major release,
3.10.
* Exim 3.10 contains numerous bugfixes and new features,
described at:
ftp://ftp.exim.org/pub/exim/ChangeLogs/NewStuff-3.10.gz
Note that the new PAM support is _not_ enabled in this port yet.
Added Makefile knob for the new MySQL support within lookups.
Added Makefile knob for the improved LDAP support.
Turn TCP Wrappers support as default behaviour.
Turn on embedded perl.
See doc/NewStuff in the distfile for bugfixes and enhancements.
FWIW, checkout of these things took 5+hrs, staying on the local
.freebsd.org net w/o hitting the 'net at all.
As promised,
$ time cvs ci
real 67m51.701s
user 0m1.250s
sys 0m5.345s
Upgrade to version 3.02, featuring:
Simplified handling of domain/host/net/address lists.
Regex handling bugfixes and improvements.
Bugfixes.
Logical improvements.
Documentation improvements.
WARNING: backward compatability issues. See README.UPDATING in
the distribution tarball for details.
Change maintainer's address.
Fixed use of $local_part in router configurations.
Fixed "unseen" on router or director on deferment of delivery.
Other minor fixes.
Fixed handling of USE_XLIB to deal with =NO correctly.
Submitted by: maintainer
Patches incorporated by the author were removed. One new patch created
to prevent core dumps when running non-listening queue-runners.
Handle the difference in BINOWN between stable (bin) and current (root),
obviating the need for an INSTALL script.
Don't install shell script "place-holders" for eximon when built without
USE_XLIB, just touch the files for package-friendliness. Graceful.
Improve out-of-the-box relay handling; localhost symoblic name was weak,
use private subnet numerical net instead.
Submitted by: maintainer
