kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/mail/spamdyke/distinfo

7 lines
300 B
Text
Raw Normal View History

Update to 4.3.1. From the changelog: This version fixes a couple of processing bugs in the new header blacklist filter and an access violation that can lead to crashes. The header blacklist should is [sic] safe to enable now.
2012-01-20 19:02:43 +01:00
$NetBSD: distinfo,v 1.28 2012/01/20 18:02:43 schmonz Exp $
Initial import of spamdyke 2.2.1. spamdyke monitors incoming traffic, acting as a middleman between qmail and the remote server. It catches the sender and recipient addresses as they go by and logs them to syslog. If it sees something it doesn't like (e.g. a blacklisted sender), it cuts the connection, closes qmail and fakes the rest of the SMTP transaction with the remote server. qmail thinks the remote server disconnected normally. The remote server thinks qmail is rejecting the message. It's the best of both worlds. spamdyke can optionally reject the connection if the remote server's reverse DNS entry does not exist, does not resolve, contains its IP address and either contains a prohibited keyword (like "dynamic") or ends in a country code; if the IP address, reverse DNS entry, or envelope sender is listed in a blacklist; or if data is sent before the SMTP greeting banner is displayed. spamdyke can also limit recipients per connection, greylist for some or all domains, and close connections that go idle or take too long.
2007-03-24 08:39:25 +01:00
Update to 4.3.1. From the changelog: This version fixes a couple of processing bugs in the new header blacklist filter and an access violation that can lead to crashes. The header blacklist should is [sic] safe to enable now.
2012-01-20 19:02:43 +01:00
SHA1 (spamdyke-4.3.1.tgz) = d532d029c0be2125298e9074939f327b92d174f2
RMD160 (spamdyke-4.3.1.tgz) = 53bba6133e122dba13ab10306dc2527bbe40c378
Size (spamdyke-4.3.1.tgz) = 526494 bytes
Update to 4.2.1. From the changelog: This version extends the log messages to show why a blacklist is matched. It also fixes a few minor bugs. Added a filter to sendrecv so input containing "\r\n" will be translated into CRLF without being interpreted as a line terminator (so multiple commands can be sent in a single "packet") and input containing "\0" will be translated into NULL bytes so NULL characters don't have to be embedded in the test scripts. Added support for the RSET command to smtpdummy. Added a "priority" field to the input file for dnsdummy to force some responses to be sent after others, no matter what order they were received. Fixed nihdns_mx() to query names for A records using the query types configured for MX queries, not A queries. Thanks to Eric Shubert for reporting this one. Changed smtp_filter() and middleman() to discard any buffered input after TLS is started. This prevents the injection of commands into a secure session by sending extra input in the same packet as the "STARTTLS" command. Not really a security problem but good practice anyway. Thanks to Eric Shubert for reporting this one. Fixed a bug in examine_entry() that was cutting off 1-3 characters from the end of target_entry every time it was called. Changed check_ip_in_rdns_keyword() to return the line number of the matching file as its return value and the name of the matchine file in a reference variable. Added reject_reason and strlen_reject_reason to struct rejection_data to allow the triggered filter to return some text to indicate why it triggered. Changed set_rejection() to accept new parameters to set reason text within the rejection structure if available. Changed set_rejection() to accept a new parameter to append to the rejection text if available. Added reset_rejection() to change either the rejection text or the reason text within an existing rejection_data structure without erasing previously-set values. Changed nihdns_rbl(), check_dnsrbl() and check_rhsbl() not to accept a format string or build part of the rejection message. That job belongs to the caller(s). Changed filter_rdns_blacklist(), filter_rdns_blacklist_file(), filter_rdns_blacklist_dir(), filter_ip_blacklist(), filter_ip_in_rdns_blacklist(), filter_dns_rbl(), filter_dns_rhsbl(), filter_sender_blacklist(), filter_sender_rhsbl() and filter_recipient_blacklist() to save the reason for their rejection in the reject_reason variable in rejection_data. Changed the log messages showing ALLOWED/DENIED to always output the "reason:" field and fill it with the text returned by the triggered filter so the sysadmin can figure out what happened or "(empty)" if no text was saved. Thanks to Eric Shubert for suggesting this one. Changed the way DNS timeout values are read from the configuration file, the command line, /etc/resolv.conf and the environment so that values given in the config file or on the command line are not overridden by values in /etc/resolv.conf or the environment. Thanks to Teodor Milkov for reporting this one. Changed the reject-empty-rdns filter, the IP-related black/whitelist filters and the IP-related RBL filters to skip their tests if the incoming IP address is 0.0.0.0. This is for connections from IPv6 hosts -- those filters can be skipped until full IPv6 support can be added. Thanks to Daniel Anliker for suggesting this. Changed the way the flag FILTER_DECISION_TRANSIENT_DO_NOT_FILTER is handled by smtp_filter() and middleman() so a transient non-rejection (e.g a recipient whitelist) isn't held over to later recipients. The interaction between the recipient whitelist and the graylist filter was fixed in version 4.0.0 but an issue still remained between recipient whitelists and other non-transient rejections like the missing rDNS filter. Thanks to bischowski for reporting this one. Changed smtpdummy to use memchr() instead of strchr() so testing input with NULL bytes will work correctly.
2012-01-05 01:53:19 +01:00
SHA1 (patch-aa) = 2c8e0bfc746540942d1e05d7253e3b54e4ecb487
Reference in a new issue Copy permalink