summaryrefslogtreecommitdiff
path: root/libexec/spamd
AgeCommit message (Collapse)Author
2011-03-19fix rdr-to example (requires direction); from James TurnerOkan Demirmen
ok jmc@
2011-03-03repair arguments passed to pfctl; PR 6142, ok beckTheo de Raadt
2010-10-06do not pass GREY entries to pf's spamd-white table if already TRAPPED.Stephan A. Rickauer
Fixes pr/6467. (from boudewijn at indes dot com) - ok beck@
2010-01-14drop connections to confused clients who do repeated command failures -Bob Beck
typically when a client just flings commands at us without looking for responses and then gets confused. ok jsing@
2010-01-11KNFBob Beck
2010-01-11KNFBob Beck
2009-11-12malloc() after line length check, to avoid memory leak; ok teduTheo de Raadt
2009-09-17merge/update the spamlogd rules into spamd - there were some subtleJason McIntyre
problems because of the recent pf nat changes that caused problems; i've fleshed out the example in spamd and just added a pointer to it from spamlogd; ok beck
2009-09-07the example pf rules should be "pass in", not just "pass"; ok henningJason McIntyre
2009-09-01match samples here with pf.conf(5) sample ruleset following recent pf changesTodd T. Fries
ok henning@
2009-05-20Do not fall back to using nobody if _user is missing, butThordur I. Bjornsson
error out. Add a new user _rwalld for rpc.rwalld, and use that instead of nobody, also unconditionally drop to _rwalld not only if rpc.rwalld was started with euid 0 (as root). ok deraadt@
2009-04-20tweak previous;Jason McIntyre
2009-04-20PR 6090 - from Olli Hauer <ohauer@gmx.de>Bob Beck
A number of small improvements: - patch for empty lines and comments in alloweddomains_file - remove some whitespaces at end of line. - document comment and empty line handling - Remove unused parameter 'r' from getopt in spamd.c, it is removed in the 'switch statement' but not in getopt. http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/spamd/spamd.c.diff?r1=1.94;r2=1.95;f=h - replace atoi with strtonum - make debug output more usefull, display only what will be synced and not a second message which prints always "sync trapped %s" - some cosemtic and whitespace fixes.
2009-02-25fix slow memory leak, spotted by Max Laier and Artis CauneBob Beck
ok deraadt@, oga@, otto@
2009-02-17clarification for the MX stuff; requested by Stephan A. RickauerJason McIntyre
ok beck
2008-12-07time_t is signed, so use INT_MAX rather than UINT_MAX when parsing a time_tChad Loder
with strtonum
2008-09-20document spamd log entry format; requested by Stephan A. RickauerJason McIntyre
ok beck
2008-08-26Fix an if (); typo. ok beck@Jonathan Gray
2008-08-11some documentation updates for spamd synchronisation:Jason McIntyre
- whitelisted entries are not synced - entries added manually (using spamdb) are not synced suggested by Stephan A. Rickauer; ok reyk
2008-07-11shut off an annoying gcc warning.Reyk Floeter
ok beck@
2008-07-11write a syslog debug message when a new GREY or TRAPPED entry is addedReyk Floeter
to the database. ok beck@
2008-07-11greyreader() shouldn't return, so tell us if it doesPeter Hessler
ok beck@, reyk@
2008-05-22version 2 of spamd sync protocol for two reasons:Theo de Raadt
1) ip addresses were accidentally being sent in host-byte order, which caused compatibility problems (spotted by jbg) 2) the sub-headers in the frame were not natively aligned, thus timeout values were incorrectly sent by 64-bit machines ok beck
2008-05-09As was done in dhcpd, insert pad blocks after sub-messages to keep theTheo de Raadt
structures aligned to 16 byte boundaries for maximum portability (somewhat similar to CMSG's). Old spamd's and new spamd's can still communicate with this change. It would be nice if someone tested spamd on 64-bit unaligned architectures (with and without this change) ok beck
2008-05-07check if the received buffer of a sync element is even big enough toReyk Floeter
hold the header with length field. ok deraadt@ beck@
2008-03-28typo, ok beck@Alexander von Gernler
2008-01-08simplify the suggested pf ruleset; ok beckJason McIntyre
2007-12-27Add a missing length check of received spamd sync packet headers.Reyk Floeter
From Diego Giagio (dgiagio at gmail) with input from tedu@
2007-11-03PR 5621 - spamd doesn't clear the last entry from an empty TRAP list,Bob Beck
noticed and patch from Piotr Sikora <piotr@sikora.nu>
2007-09-02use calloc() to avoid malloc(n * m) overflows; checked by djm canacar jsgTheo de Raadt
2007-08-16- Don't fill spamd debug with bogus config errors if there are noRay Lai
traps. - Change count to size_t to avoid a size_t -> int conversion. - Since configure_spamd always returns 0, change to void. - Since configure_spamd now returns void, remove unreachable logging statement. OK ckuethe and deraadt, initial diff from fgsch@ and OKed by beck.
2007-08-11tweak previous:Jason McIntyre
- this document talks about "default mode", not "greylisting mode" - kill trailing whitespace
2007-08-11Add note to the effect that the spamd pf table is noJonathan Gray
longer used in greylisting mode. ok ckuethe@
2007-07-07document maximum values for -S and -s;Jason McIntyre
from Saint Aardvark the Carpeted, documentation/5535;
2007-06-25s/is is/it is/. From Jim Razmus, jim (at) bonetruck (dot) org; thanks.Tom Cosgrove
2007-05-31convert to new .Dd format;Jason McIntyre
2007-05-26remove a redundant paragraph; ok beckJason McIntyre
also, this section is blacklist-only, so tweak .Sh
2007-05-19spamd-setup needs -b for blacklist-only mode; from Nick TempletonJason McIntyre
2007-04-13fix helo to error out if no domain is providedBob Beck
ok millert@
2007-04-13rename h_name to sh_name. hname gets redefined in netdb.h to a zeroOtto Moerbeek
sized array, so memory corruption occurs when writing the field. problem encountered by Jeremy C. Reed. ok reyk@
2007-03-29I relinquish any copyright claim I have on this fileKjell Wooding
2007-03-26kill trailing whitespace...shame on me if i sent bob a diff w/Jason McIntyre
whitespace at eol
2007-03-26use new license. ok kjell@, who also wanted his name removed, but he needsBob Beck
to remember how to commit to do that.
2007-03-26use new license, ok deraadt@Bob Beck
2007-03-26use new license.Bob Beck
2007-03-26Copyright - I should share the blame.Bob Beck
2007-03-26A couple of spamd improvementsBob Beck
1) Implement the NOOP command, which now seems necessary for certain windows mail wrappers and sender verification schemes. Tested by me and sidcarter@symonds.net, who noticed the problem on his site. ok millert@ 2) Change the behaviour of the maxblack parameter, instead of hanging up immediately on new blacklisted connections when the maxblack parameter is reached, we instead make spamd not stutter at them, so the connection is instead completed quickly. This seems to handle peaks and spikes much better than the old way of doing this. ok deraadt@, with some man page changes by jmc@
2007-03-18Be sure to exit if the db_open of the second db for conversion fails.Bob Beck
2007-03-16Fix dribbly HMAC leak.Bob Beck
ok reyk@
2007-03-16now that we leave the grey, avoid annoying re-adds of white entriesBob Beck
by checking for them being in the db first. ok millert@