BUGFIX: Token values incorrectly calculated, cause false positives
BUGFIX: Daemon mode + hash_drv results in crashes without HashConcurrentUser
BUGFIX: Invalid call to calloc() in hash_drv can lead to crashes
Package changes:
- Add DSPAM_WWWUSER and DSPAM_WWWGROUP as BUILD_DEFS
(not everyone uses apache)
- Change group ownership on dspam.conf to ${DSPAM_WWWGROUP}
Pointed out in tech-pkg@ by matt (at) bodgit-n-scarper.com
- Remove patch-ac as that's been applied upstream
- PLIST fixes for css* tools installed with hash driver
From DSPAM RELEASE_NOTES:
BUGFIX: ParseToHeaders can segfault on malformatted To header
BUGFIX: TrackSources does not correctly parse messages when used with QMail
BUGFIX: Missing check for existing strcasestr
BUGFIX: X-DSPAM-Reclassified heading appears blank
BUGFIX: Plused-Detail support does not work with domains
BUGFIX: Hash databases are not 8-byte aligned (do not work with 64-bit systems)
BUGFIX: Certain daemon-mode operations append a trailing period
BUGFIX: DataSource 'document' option causes improper processing
BUGFIX: Segfaults occur on malformed Content-Type header
BUGFIX: History appears blank in dspam.cgi
ok'ed xtraeme@
From the RELEASE file:
Automatic Whitelisting Improvements
Dynamically Loadable Storage Driver Support
PostgreSQL Performance Enhancements
LDAP Verification
Unified Spam Alias / UID in Signature Support
Domain Based Delivery Hosts
Integrated Clam A/V Support
Markovian Discrimination
Self-Contained Hash Driver
Fallback Domain-Based User Support
Improved, Unified Logging
Activity logging has also been improved
Plused Detail Support
Message Fragments Support
Domain Blocklisting Support
User preferences made case-insensitive
LMTP error codes now include messages from relay host
RBLInoculate option allows RBL'd emails to be quarantined or learned as spam
MySQL and PgSQL object creation scripts updated to improve performance
Added 'date' to quarantine display and sorted most recent at top
Significant code cleanup and audit
Domain-based groups changed from @domain.tld to *@domain.tld
X-DSPAM-Result expanded to support Virus, Blacklisted, and Blocklisted results
DSPAM WebUI now supports history paging
Rewritten documentation for ease of installation
* dspam can run too early in the boot process: add REQUIRE: servers.
* dspam=YES is always assumed in rc.conf: fixed by using checkyesno $rcvar.
This closes PR pkg/31571.
properly dissociate ourselves from the controlling terminal (and more).
This is still not enough to make daemon mode stable for me on 3.0_BETA, but
it's certainly a step in the right direction.
file's sole purpose was to provide a dependency on pkg-config and set
some environment variables. Instead, turn pkg-config into a "tool"
in the tools framework, where the pkg-config wrapper automatically
adds PKG_CONFIG_LIBDIR to the environment before invoking the real
pkg-config.
For all package Makefiles that included pkg-config/buildlink3.mk, remove
that inclusion and replace it with USE_TOOLS+=pkg-config.
Changes:
BUGFIX: File descriptor leaks when connection to delivery host fails
BUGFIX: Decoding NUL characters causes message truncation
BUGFIX: Many files not written to group directory when using managed groups
BUGFIX: Some LDAs/MTAs truncate message when single dots not properly quoted
BUGFIX: 7BIT encoding contains 8BIT characters
BUGFIX: Messages to multiple local recipients may fail to decode completely
around at either build-time or at run-time is:
USE_TOOLS+= perl # build-time
USE_TOOLS+= perl:run # run-time
Also remove some places where perl5/buildlink3.mk was being included
by a package Makefile, but all that the package wanted was the Perl
executable.
Changes:
BUGFIX: File descriptor leaks when connection to delivery host fails
BUGFIX: Decoding NUL characters causes message truncation
BUGFIX: Many files not written to group directory when using managed groups
BUGFIX: Some LDAs/MTAs truncate message when single dots not properly quoted
BUGFIX: 7BIT encoding contains 8BIT characters
BUGFIX: Messages to multiple local recipients may fail to decode completely
Changes:
BUGFIX: Delivery of false positives fails in managed groups
BUGFIX: LMTP/SMTP delivery fails on non-250 2xx response code
BUGFIX: Messages missing a terminating boundary fail to receive a signature
And always is defined as share/examples/rc.d
which was the default before.
This rc.d scripts are not automatically added to PLISTs now also.
So add to each corresponding PLIST as required.
This was discussed on tech-pkg in late January and late April.
Todo: remove the RCD_SCRIPTS_EXAMPLEDIR uses in MESSAGES and elsewhere
and remove the RCD_SCRIPTS_EXAMPLEDIR itself.
Version 3.4.5-STABLE
This version is a maintenance release and contains bug fixes only
BUGFIX: First run / first spam notifications don't send for users in groups
BUGFIX: Permissions on dspam.sock are wrong mode
BUGFIX: Bogus signature retrieval errors in logs
BUGFIX: LMTP error codes reporting permanent errors for temporary failures
BUGFIX: ParseToHeaders' notspam- alias fails to change user correctly
* Modify permissions for DSPAM_HOME, it should be
${DSPAM_USER}:${APACHE_GROUP}, so that the CGI interface works
correctly without modifications.
Bump PKGREVISION.
Version 3.4.4-STABLE
This version if a maintenance release and contains bug fixes only
BUGFIX: Message-based signatures do not appear in quoted-printable/base64 parts
RELEASE 3.4.3-STABLE
This version is a maintenance release and contains bug fixes only
BUGFIX: When using LMTP/SMTP delivery, QuarantineAgent is ignored
BUGFIX: Domain-scale uses wrong data path in admin script
BUGFIX: DSPAM fails to build on Cygwin
BUGFIX: optIn does not work when using preferences extensions
BUGFIX: showFactors does not set/unset properly in user preferences
BUGFIX: Supplying an empty spamSubject raises errors in user preferences
BUGFIX: Signature-related errors are not reported (except to debug)
BUGFIX: Formatting bug in system.log
Changes:
BUGFIX: Minior memory leaks in multi-word tokenizer
BUGFIX: When using --classify, the system/user log is appended to
BUGFIX: Using signatureLocation=headers should prefer signature in headers
BUGFIX: History-based training only works for admins
BUGFIX: Long usernames malformatted in dspam_stats
BUGFIX: Daemon connection deadlocks when NULL characters are sent
BUGFIX: Other minor memory leaks
BUGFIX: PostgreSQL connections stay open in daemon mode
Changes:
o Accuracy Enhancements
o Bayesian Noise Reduction v2.0
o TUM-Mode Enhancements
o Library Performance Enhancements
o PostgreSQL Storage Driver Enhancements
o SQLite3 Storage Driver Support
o Daemonized LMTP Server
o LMTP Delivery
And more... more info in the RELEASE.NOTES file.
pkgsrc changes:
o Add a dspam rc.d script to start the daemon.
o The cgi configuration files were modified to support
CONF_FILES and PKG_SYSCONFDIR.
When using a NetBSD system, mount_umap(8) will be useful to mount
the cgi directory with www permissions, and you won't need to modify
any file in there! yay.
RELEASE 3.2.6-STABLE
BUGFIX: Sedation level instantiates when not specified
(should default to off)
RELEASE 3.2.5-STABLE
BUGFIX: statisticalSedation preference is ignored
Changes:
BUGFIX: MIME boundaries using broken RFC are misread
BUGFIX: Tools will not build when CFLAGS is provided
BUGFIX: DSPAM misreads lines after -- as headers and fails to decode them
BUGFIX: DSPAM misreads lines after -- and adds colons to them
Enhancements:
PostgreSQL Storage Driver
Some minor fixes have been made to the PostgreSQL storage driver which may
affect performance.
Version 3.2.3 is a maintenance release and contains corrections to
v3.2 only.
BUGFIX: DSPAM misreads boundary delimiter in signed Apple Mail messages
BUGFIX: Signature is not written to multipart blocks with no content type
BUGFIX: dspam_dump for a particular token fails with MySQL 4.1
BUGFIX: Bayesian Noise Reduction is never instantiated
Version 3.2.2 is a maintenance release and contains corrections
to v3.2 only.
BUGFIX: optOut preference no longer works
BUGFIX: Source address tracking doesn't work when using TOE
BUGFIX: LocalMX tag doesn't work in dspam.conf
BUGFIX: dspam.conf default permissions 0750
BUGFIX: Using SignatureLocation=headers no longer works with
fwd attachments
BUGFIX: Source address tracking is disabled by legacy #ifdef's
BUGFIX: Chi-Square cutoff is identical to default token value
BUGFIX: Tokens from lines 2+ of multi-line headers are not processed
BUGFIX: Signature scan segfaults when scanning some emails
BUGFIX: Signature encoding can cause segfault in sqlite_drv
Other Notable Changes:
CHANGE: TrackSources 'ham' token changed to 'nonspam'
CHANGE: Agent loose signature match changed from DSPAM: to
X-DSPAM-Signature:
Version 3.2.1 is a maintenance release and contains bugfixes to v3.2.0 only.
BUGFIX: PGP Messages cause pop3filter to hang
BUGFIX: Invalid read of free()'d memory caused by parsing multi-line headers
BUGFIX: SQLite driver fails to call PRAMA specified in dspam.conf
BUGFIX: MySQL generates DUPLICATE KEY errors on simultaneous inserts
BUGFIX: Memory leaks in dspam_clean
BUGFIX: dspam_clean crashes with SQLite driver
BUGFIX: Signatures include leading whitespace when in loose match
BUGFIX: Some versions of PostgreSQL don't support PQfreemem()
BUGFIX: Memory mishandling in PostgreSQL driver
BUGFIX: Message delimiters mangled when processing a PGP signed message
BUGFIX: --with-delivery-agent configure option no longer present
BUGFIX: Default log directory /var/log not writable by some installs
BUGFIX: Man page installation doesn't prefix with $(DESTDIR)
BUGFIX: Emails ending with http:// cause invalid memory read
so that we'd not force dependance on specific MySQL version, and instead pick
the currently installed mysql*-client (or install the default if there
is no mysql-client package installed yet)
this makes package buildable with arbitrary MySQL version, such as 3.23.x,
4.0.x or 4.1.x
- dspam.conf can contain sensitive information such as SQL
username/password accounts. So change ownership to root:dspam and mode to
0640.
- The cgi template cgi/templates/nav_performance.html contains a
@yourdomain.com which should be customised on install.
Added an extra BUILD_DEFS called DSPAM_DOMAIN to allow users to do this.
ok'ed xtraeme@
Version 3.2 adds many significant enhancements, these include the
introduction of a dspam.conf master configuration, an aesthetically
redesigned web interface, support for SQLite, support for Windows, and
and many other enhancements.
More information:
http://www.nuclearelephant.com/projects/dspam/text/RELEASE-3.2.0.txt
pkgsrc changes:
* Default storage driver has been changed to SQLite, to sync with dspam's
defaults.
* Deprecated options has been removed totally, now you'll have to specify
them via PKG_OPTIONS.dspam=foo bar baz.
in the process. (More information on tech-pkg.)
Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.
Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.
All library names listed by *.la files no longer need to be listed
in the PLIST, e.g., instead of:
lib/libfoo.a
lib/libfoo.la
lib/libfoo.so
lib/libfoo.so.0
lib/libfoo.so.0.1
one simply needs:
lib/libfoo.la
and bsd.pkg.mk will automatically ensure that the additional library
names are listed in the installed package +CONTENTS file.
Also make LIBTOOLIZE_PLIST default to "yes".
into the bsd.options.mk framework. Instead of appending to
${PKG_OPTIONS_VAR}, it appends to PKG_DEFAULT_OPTIONS. This causes
the default options to be the union of PKG_DEFAULT_OPTIONS and any
old USE_* and FOO_USE_* settings.
This fixes PR pkg/26590.