- More Solaris build fixes (Jim Klimov)
- Use ZZ for unknown GeoIP country
- Fix swapped %f and %r for stat example in default greylist.conf
- Support p0f v3.06 and up with --with-p0f-src or --enable-p0f306
Patch provided by Richard Palo in private e-mail.
Approved by Thomas 'wiz' Klausner.
- Build fixes for Solaris 11 (using GCC 4.7)
- Install example for new config file format
- Replace hard-coded path to state directory in various files.
Major changes since 4.2.7:
- Allow comparison of msgsize, rcptcount & spamd, against values from LDAP
- localaddr option so that Postifix user can use spf self
- Allow filtering header and body against LDAP or CURL gathered properties
- Add format string to report last matching LDAP or CURL propery
- Add a addfooter action clause in ACL, to add mail a footer
- Allow per-dacl maxpeek setting, set by maxpeer action clause in racl
- Add LDAP or CURL gathered property substitution in format strings
- Add continue type ACL
- p0f v3 support
- Fix spamd hang if message contains NULL (Enrico Scholz)
- Send the queueid to spamd (Petar Bogdanovic)
- Ratelimit on SMTP sessions and data size
- New tarpit feature (Kouhei Sutou)
- Make SpamAssassin headers Sendmail-like (Petar Bogdanovic)
- Merge autowhite and greylist databases (Rudy Eschauzier)
- Make LDAP querries timeout configurable
- Make MX sync timeout peer-configurable (Attila Bruncsak)
This update is largely based on a patch submitted by Richard Palo
in PR pkg/47369.
- Fix ratelimit sliding window for computing average
- Fix p0f port byte order (Enrico Scholz)
- Fix milter-greylist.m4 for newer Sendmail (Joe Pruett)
- Fix autoconf warning about --datarootdir (R P Herrold)
- Build fix for Solaris
- Fix .m4 file
- Allow k or M suffix after data sizes
- Add a missing comma in X-Greylist (Kouhei Sutou)
- Look for liresolv in ${libdir} instead of /usr/lib (DUFRESNE VINCENT)
- Fix SPF on Postfix (Kouhei Sutou)
Changes since version 4.2:
- Fix a crash when a LDAP server is down.
- Fix LDAP thread safety issues
- Make LDAP querries timeout configurable
- Make MX sync timeout peer-configurable
Changes since version 4.0.1:
- SpamAssassassin support
- Native LDAP support via OpenLDAP (off by default in pkgsrc)
- DKIM support (not supported in pkgsrc)
- P0f support
- A lot of bug fixes
pkgsrc related changes:
- Optional "curl" support for external URL checking
- Fix build of GeoIP code
- Fix auth and tls clauses in ACL so that they accept regex
- Update Debian startup script (Adam Katz)
- Fix bogus ACL when using features not compiled in
- Fix corruption in urlcheck parsing (Benoit Branciard)
- Document what package contains libmilter
- Fix error about stat in greylist.conf (Bob Smith)
- Avoid C99 specific syntax (Greg Troxel)
- Documentation fixes
- Fix typos in documentation (Constantine A. Murenin)
Changes since version 3.0rc5:
- Check for -lc_r before others, for FreeBSD (AIDA Shinra)
- Fix configure for libspf2 (AIDA Shinra)
- Fix FreeBSD build (AIDA Shinra)
- Avoid buffer overflow in DNSRBL code (AIDA Shinra)
- Fix build problem with newer BerkeleyDB (AIDA Shinra)
- Check if -lbind requires -lpthread, for Linux
Changes since version 3.0rc4:
- Pointer to DRAC documentation
- FreeBSD build fixes
- Remove the /tmp/access-list.debug for security sake
- Correctly enable non blocking I/O fox MX sync
Changes since version 2.1.2:
- DNSRBL support in ACL
- Per-ACL greylisting and autowhitelisting delays
- ACL blacklist feature
- Add support to use Sendmail macros in the ACL
- Allow rejecting by tempfail on blacklist configuration
- per-ACL SMTP error code and messages
- Multi-line statement in the config file
- Report matching ACL line number in the logs
- Lists for from, rcpt, domain, netblocks and DNSRBL
- Make log output consistent (Fredrik Pettai)
- Tell local connexions are non IP instead of non IPv4 (Attila Bruncsak)
- Faster ACL code
- Option to log expired entries (Jeff Rife)
- Cosmetic changes in debug logs (Fredrik Pettai)
- A lot of bug and build fixes
This fixes PR pkg/34793 by Eric Schnoebelen.
- Bucketed in-memory databases for better concurency
- Large buffer for writing the dump file
- Option to disable human-readable date in dumps
- Check for MXsync sends
- Better handle non fatal I/O errors in MXsync
- Fix ACCESSDB whitelist with multiple recipients
- DRAC support
- Log hostname as well as IP in ACL debug
- Record HELO for SPF 2
- correctly update autowhitelist when subnetmask is used (Attila Bruncsak)
- Fix deadlock in autowhitelisting code (Attila Bruncsak)
- Avoid using inet_makeaddr because it breaks on IRIX (Pavel Cahyna)
- Check if -D_SGI_SOURCE is needed on IRIX
- Document ABI problems on IRIX (Pavel Cahyna)
- Remove reload by SIGHUP in rc-debian.sh (Pavel Cahyna)
- Add support for newer libspf2 (Hajimu UMEMOTO)
- Missing flags in milter-greylist usage display
- Gentoo startup sript (Stephane Lentz)
- rc-linux.sh was renamed rc-redhat.sh
- More broken servers in the default config file
- Fix wrong sync queue counter computations (Attila Bruncsak)
- Add a -c option to just check the config and exit (Klas Heggemann)
- Don't block threads while reloading config (Attila Bruncsak)
- Allow regex with # in the configuration (Hajimu Umemoto)
- Ignore self as sync peer (Matthias Scheler and Hajimu Umemoto)
- Document ressource shortage for memory and file descriptor
- Remove outdated documentation about IPv6
- Fix a build problem on systems that don't have IPv6 (Hajimu Umemoto)
- Fix a minor bug with SPF (Hajimu Umemoto)
- Give credits to the various contributors in the man pages
- Do not match bogus IPv6 addresses in the dump file (Hajimu Umemoto)
- Quick statistics at the end of the dump file (Remy Card)
- Fix build on Tru64 Unix, including for IPv6 (Attila Bruncsak)
- Fix a SPF log problem (Alexandre Cherif)
- Fix a bug in configure.ac (Hajimu Umemoto)
- malloc e-mail addresses, avoids truncation at 32 chars (Hajimu Umemoto)
- Configurable MX sync bind port and address (Cyril Guibourg)
- Disable getnameinfo as in causes an ABI clash in Linux
- Fix bad substitutions in rc scripts
- Fix build problems on Solaris
- Avoid race conditions when reloading the config (Attila Bruncsak)
- Full blown IPv6 support, from Hajimu Umemoto
- rc-debian.sh script, from Joel Bertrand
- Fix unproper MX sync port on little endian machines
- Add a template Makefile to manually tweak if configure fails
- Feed strtkok_r with a NULL initialized pointer
- More mixed I/O fix: another fflush after a fgets()
- Fix mixed I/O in MX sync on Solaris, from Attila Bruncsak
- Check that compiler and linker accept -Wall
- Document the comment on end of line bug
- Clean up rc-solaris.sh on make clean
- syslog the expired autowhite entry correctly, from Mattieu Herrb
- Handle mailing lists with unique sender by removing '^.*=' from sender
- Minor bug fixes in queue management from Wolfgang Solfrank
- Solaris rc script from Christian Pelissier
- Correctly check pthread function return values
- Avoid using a thread for the initial config file load (useless)
- Bug fix: Domain regex were not freed on config file reloads-
- Bug fix: Timeout parmaeter was not honoured everywhere
- Shut up a warning at build time
- Bug fix: on some platforms, reloading the config caused SIGSEGV
- Big bug fix: rcpt keywords did not work anymore without regex-
- Case-insensitive regular expression matching
- Fix install bug on some platforms (permissions)
- Use CC as defined by configure, fix the build on Solaris
- Build fix in Yacc file
- DNS support in greylist.conf through the domain keyword
- Make the greylist timeout a config file option
- Bug fix: lazyaw did not work properly in some situations
- Final dump on milter-greylist exit
- Case insensitive check for autowhitelist everywhere (was inconsistent)
- Better scallability by adjusting the dump delay
- Work with NetBSD 2.0 native libpthread
- Support STARTTLS (Contribution from Matthieu Herrb)
- Add a list of broken MTA in the default whitelist
- Fix a bug that caused wrong delay time.
- Documentation about MX sync and firewalls
- Case insensitive autowhitelist e-mail addresses checks
- Introduce a lazyaw option to match only IP addreses in autowhitelist
- Remove fake error message on dump reload (make the LOG_DEBUG)
- List build dependenvies in README
Approved by Alistair Crooks.
- SMTP AUTH support
- subnet matching and SPF support to better work with mail farms
- All command line options now have equivalent in the config file
- IPv6 aware
- regex can be used in the configuration file
- a small bugfix: it had some trouble with addresses larger than 31 chars
- database is dumped on each mail instead of every 5 minutes. It now
includes a human-readable date for acceptation time.
