the owner of all installed files is a non-root user. This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.
(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
unprivileged.mk. These two variables are lists of other bmake
variables that define package-specific users and groups. Packages
that have user-settable variables for users and groups, e.g. apache
and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
and ${UNPRIVILEGED_GROUP}.
(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
Removed the KEEPDBOPEN option as it could lead to multiple instance of gld
running when mail traffic is low and thus father process MYSQL connection
timeout. Furthermore, after tests, efficency is the same.
KEEPDBOPEN option is now silently ignored to forced to NO.
developer is officially maintaining the package.
The rationale for changing this from "tech-pkg" to "pkgsrc-users" is
that it implies that any user can try to maintain the package (by
submitting patches to the mailing list). Since the folks most likely
to care about the package are the folks that want to use it or are
already using it, this would leverage the energy of users who aren't
developers.
16/09/2005 : V 1.6
- Removed the algorithm lightgreydomain as the new mxgrey
does better and simpler
- Removed the UPDATE option, now gld always update triplets.
- Fixed a minor flaw in the MXGREY algorithm.
- Now you can configure MXGREY to consider an ip as a safe
MX after X succesful greylists instead of only 1 . (read
gld.conf for details)
- Now gld updates the counters only when mail is not
greylisted
- Added Training mode, read gld.conf for details
- Now gld verify that if you supply a custom smtp code,
it's a 4XX code otherwise gld discard it and use 450 .
- If gld cannot connect to MySQL server on startup
it will not refuse to run anymore, but will set keepdbopen
to 0 and accept to run .
- The sample config file provided now only listen to loopback
only accept connection from localhost and runs as nobody/
nobody.
WARNING: if you were using lightgreydomain algorithm, it
has been discontinued use MXGREY in place, please read
gld.conf for details.
backslashes anymore. A single backslash is enough. Changed the
definition in all affected packages. For those that are not caught, an
additional check is placed into bsd.pkginstall.mk.
Some changes were done: enabling the LOOPBACK option by default,
fix some snprintf() calls, etc.
While I'm here convert this pkg to use bsd.options.mk, now that it
supports MySQL and PostgreSQL (MySQL by default as before).
under share/examples/rc.d. The variable name already was named
RCD_SCRIPTS_EXAMPLEDIR.
This is from ideas from Greg Woods and others.
Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism
(as requested by wiz).
Gld is a standalone greylisting server for Postfix SMTP, it
listens on a TCP port and use MySQL for storing data.
The server supports whitelists based on sender,sender_domain
and client_ip, it supports also light greylisting and DNS white
lists.
