Pkgsrc changes:
- Submitted patch-aa upstream.
- Added LICENSE.
- Put PKG_INSTALLATION_TYPES and PKG_DESTDIR_SUPPORT in section 4 of Makefile.
- Shut up a pkglint warning about quoting.
Changes since version 2.84:
===========================
2.85 (July 21, 2008)
Relicense under Artistic License 2.0. See LICENSE for details.
Patch-aa is no longer necessary (creation of correct symlinks to
"razor-client").
This release fixes two recently discovered DoS vulnerabilities: Certain
HTML messages could crash the process and a bug sometimes caused server
discovery to go into an infinite loop.
Changes since version 2.67
==========================
2.72 (June 16, 2005)
+ "razor-client" no longer creates symlinks to itself
upon installation; four new scripts have been added to
the distribution to replace this functionality
("razor-admin", "razor-check", "razor-report",
"razor-revoke").
2.71 (June 15, 2005)
+ A fix to Makefile.PL script to correctly invoke
"razor-client" after installation. Thanks to Liam
Quinn for the patch.
2.70 (June 10, 2005)
+ Fixed preprocessing of unusual HTML messages. This
resolves the segfault issue in razor-agents. [Bug
#1001417]
+ Fixed handling of certain malformed headers.
+ Explicitly specify the record separator as "\n" when
reading files, to ensure that someone else hasn't set
it to undef. [Patch #537813]
+ "razorzone" is no longer supported and has been
removed from the documentation.
+ Allow the config file to set razorhome. [Bug
#1074391]
+ Razor Agents no longer go into an infinite loop when
discovery fails. [Bug #1016039]
+ Properly creates "razor-*" symlinks after installa-
tion. [Bug #874468]
+ Default to PERLPREFIX instead of PREFIX when
installing man5 pages. [Bug #1001320]
+ Removed a call to $sha1->reset() which was breaking
SHA1 calculation. [Bug #1004858]
+ "use_engines" is no longer supported and has been
removed from the documentation. [Bug #1120311]
+ Shuffle the discovery, catalogue, and nomination
server lists after loading them from disk; this pre-
vents razor-agents from always starting with the same
catalogue server.
+ Replace the complex DNS lookup logic for discovery
servers with a single DNS round robin. [Bug #604679]
+ Remove the ICMP ping logic for finding the "fastest"
catalogue server; the configuration option for this
logic is now ignored. [Support #739464]
+ Removed stale engine code for various signature types
that are no longer used.
No longer dependent on Digest::Nilsimsa
External taint patches no longer necessary.
Changes since 2.36
* Applied another Makefile.PL patch from Michael Schwern to correctly
install manpages in part 5 of the manual set in various versions of
perl.
* Applied patch from Mark Martinec and Vivek Khera of Amavisd to
untaint various file targets obtained from user input. This is the
same patch pointed to by the SpamAssassin FAQ
[http://www.spamassassin.org/released/Razor2.patch]
* Support for HTTP 1.1 tunneling [SF patch #821324] by Jon Schewe.
* Applied Anne Bennett's patch to Logger.pm to introduce a new log
target, "syslog-sys", that talks to Syslog over a Unix socket rather
than a TCP socket.
* Applied Anne Bennett's patch to deHTML.xs to get rid of the type
mismatch warning.
* Removed computation of signatures that are no longer supported by
the backend -- engines 1, 2 and 3. Digest::Nilsimsa no longer
required by Razor Agents.
Beattie encountered on Linux.
Relevant changes sinc 2.22:
o Better compatibility of Makefile.PL with new MakeMaker
o C Code compiles with C compilers other than GCC.
o Detect and skip body parts that only contain MIME headers.
o Fixed a bug where razor-check would terminate prematurely
on messages for which it could not compute a signature.
o Introduced SOCKS support. Net::SOCKS is required in
order to use SOCKS. Specify socks_server in the config file.
o Fixed a bug where the MIME boundary was being spuriously set
in certain cases.
o A bug in the selection of zone prefixes in bootstrap
discovery was fixed.
o Razorhome is gleaned from the config file passed to
razor-agents, if all else fails. "razor-report
-conf=/etc/razor/razor.conf spam" will use /etc/razor
as its home if no other home is found (eg in
$HOME/.razor). To force a particular Razorhome value,
use the -home=path option.
o Force bootstrap discovery when all discovery servers are
unavailable. This fixes a bug where by razor-agents would
try to connect to the old Razor2 discovery server found in
servers.discovery.lst.
Fixes come from the SpamAssassin 2.60 release (originally from
http://www.ijs.si/software/amavisd/ (Thanks to amavisd-new, Mark Martinec,
and Vivek Khera!))
======== Changes since v 2.14 =========================================
2.22 (Nov 21 2002)
* Turned off verbose logging in ehash that was left on by mistake.
[vipul]
* Some user contributed additions to the FAQ.
2.21 (Nov 19 2002)
* Ephemeral Hash reverts to the entire content when both sections are
composed of whitespace. This makes a certain type of false positives
go away. [vipul]
* Razor2::Client::Core skips whitespace only message parts. [vipul]
* DebugLevel 15 prints out the content after preprocessing, just
before the signatures are computed. [vipul]
2.20 (Oct 15, 2002) (First Stable Version)
* If log file isn't writable for whatever reason, we write logs to
/dev/null. [vipul]
* We look for stray "\r"'s in the split_mime function. Thanks to Jim
<jim@ironchicken.org> for pointing this out. [vipul]
* Added a significantly faster XS version of deHTML code. [vipul]
* Made ::Agent taint friendly. [vipul]
* Added support for passing an already open filehandle to
"::Agent::checkit()" and "::Agent::parse_mbox()" [vipul]
* Made logic_method 4 the default. [vipul]
* Added Razor2::Syslog to the package. [vipul]
Changes:
- almost a complete (compatible) rewrite of Razor v1.
- uses new (fuzzy) signature algorithms to better spot 'mutating'
messages
- Spam reports are now validated based on 'reputation' of the submitter
in order to make it easier to eliminate false positives.
- Registration for submitters required.
- Revocation of spam reports is now possible.
