Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-05-22 | version 2 of spamd sync protocol for two reasons: | Theo de Raadt | |
1) ip addresses were accidentally being sent in host-byte order, which caused compatibility problems (spotted by jbg) 2) the sub-headers in the frame were not natively aligned, thus timeout values were incorrectly sent by 64-bit machines ok beck | |||
2008-05-09 | As was done in dhcpd, insert pad blocks after sub-messages to keep the | Theo de Raadt | |
structures aligned to 16 byte boundaries for maximum portability (somewhat similar to CMSG's). Old spamd's and new spamd's can still communicate with this change. It would be nice if someone tested spamd on 64-bit unaligned architectures (with and without this change) ok beck | |||
2008-05-07 | check if the received buffer of a sync element is even big enough to | Reyk Floeter | |
hold the header with length field. ok deraadt@ beck@ | |||
2008-03-28 | typo, ok beck@ | Alexander von Gernler | |
2008-01-08 | simplify the suggested pf ruleset; ok beck | Jason McIntyre | |
2007-12-27 | Add a missing length check of received spamd sync packet headers. | Reyk Floeter | |
From Diego Giagio (dgiagio at gmail) with input from tedu@ | |||
2007-11-03 | PR 5621 - spamd doesn't clear the last entry from an empty TRAP list, | Bob Beck | |
noticed and patch from Piotr Sikora <piotr@sikora.nu> | |||
2007-09-02 | use calloc() to avoid malloc(n * m) overflows; checked by djm canacar jsg | Theo de Raadt | |
2007-08-16 | - Don't fill spamd debug with bogus config errors if there are no | Ray Lai | |
traps. - Change count to size_t to avoid a size_t -> int conversion. - Since configure_spamd always returns 0, change to void. - Since configure_spamd now returns void, remove unreachable logging statement. OK ckuethe and deraadt, initial diff from fgsch@ and OKed by beck. | |||
2007-08-11 | tweak previous: | Jason McIntyre | |
- this document talks about "default mode", not "greylisting mode" - kill trailing whitespace | |||
2007-08-11 | Add note to the effect that the spamd pf table is no | Jonathan Gray | |
longer used in greylisting mode. ok ckuethe@ | |||
2007-07-07 | document maximum values for -S and -s; | Jason McIntyre | |
from Saint Aardvark the Carpeted, documentation/5535; | |||
2007-06-25 | s/is is/it is/. From Jim Razmus, jim (at) bonetruck (dot) org; thanks. | Tom Cosgrove | |
2007-05-31 | convert to new .Dd format; | Jason McIntyre | |
2007-05-26 | remove a redundant paragraph; ok beck | Jason McIntyre | |
also, this section is blacklist-only, so tweak .Sh | |||
2007-05-19 | spamd-setup needs -b for blacklist-only mode; from Nick Templeton | Jason McIntyre | |
2007-04-13 | fix helo to error out if no domain is provided | Bob Beck | |
ok millert@ | |||
2007-04-13 | rename h_name to sh_name. hname gets redefined in netdb.h to a zero | Otto Moerbeek | |
sized array, so memory corruption occurs when writing the field. problem encountered by Jeremy C. Reed. ok reyk@ | |||
2007-03-29 | I relinquish any copyright claim I have on this file | Kjell Wooding | |
2007-03-26 | kill trailing whitespace...shame on me if i sent bob a diff w/ | Jason McIntyre | |
whitespace at eol | |||
2007-03-26 | use new license. ok kjell@, who also wanted his name removed, but he needs | Bob Beck | |
to remember how to commit to do that. | |||
2007-03-26 | use new license, ok deraadt@ | Bob Beck | |
2007-03-26 | use new license. | Bob Beck | |
2007-03-26 | Copyright - I should share the blame. | Bob Beck | |
2007-03-26 | A couple of spamd improvements | Bob Beck | |
1) Implement the NOOP command, which now seems necessary for certain windows mail wrappers and sender verification schemes. Tested by me and sidcarter@symonds.net, who noticed the problem on his site. ok millert@ 2) Change the behaviour of the maxblack parameter, instead of hanging up immediately on new blacklisted connections when the maxblack parameter is reached, we instead make spamd not stutter at them, so the connection is instead completed quickly. This seems to handle peaks and spikes much better than the old way of doing this. ok deraadt@, with some man page changes by jmc@ | |||
2007-03-18 | Be sure to exit if the db_open of the second db for conversion fails. | Bob Beck | |
2007-03-16 | Fix dribbly HMAC leak. | Bob Beck | |
ok reyk@ | |||
2007-03-16 | now that we leave the grey, avoid annoying re-adds of white entries | Bob Beck | |
by checking for them being in the db first. ok millert@ | |||
2007-03-15 | fix -y example; | Jason McIntyre | |
closes user/5408 from sthen ok reyk | |||
2007-03-14 | when using low prio MX trapping, ignore hosts connecting to the low prio | Bob Beck | |
mx for the first minute, to avoid problems if hosts legitimately try it after we are down. suggested by millert@ | |||
2007-03-14 | Don't delete grey entries when whitelisting. They expire anyway | Bob Beck | |
and this hides the evidence. Avoids a potential race when using -M traps where a retry comes in between deletion and whitelisting. ok millert@ | |||
2007-03-12 | log when we trap a host. | Bob Beck | |
2007-03-07 | Add some emphasis for easier reading and clarify MX trapping by | Todd C. Miller | |
explicitly mentioning IP aliases, which is typically how you would implement MX trapping using a single host. OK beck@, trusted by deraadt@ | |||
2007-03-07 | sync usage(); ok deraadt | Jason McIntyre | |
2007-03-07 | clean up the greytrap stuff; | Jason McIntyre | |
2007-03-07 | some spelling fixes; | Jason McIntyre | |
2007-03-07 | new sentence, new line | Jason McIntyre | |
kill whitespace at eol | |||
2007-03-06 | Add -M option to specify a local address that is a lower priority MX | Bob Beck | |
address than the primary one. spamd will trap hosts that contact this address first without first contacting the primary. - get it in, deraadt@ | |||
2007-03-06 | tweak -c; sort FILES; | Jason McIntyre | |
2007-03-06 | - move LOGGING into the main body | Jason McIntyre | |
- move some relevant bits of SYNCHRONISATION into -Yy descriptions - tweaks for SYNCHRONISATION ok reyk beck | |||
2007-03-06 | document allowing -c to increase to within 200 of kern.maxfiles | Bob Beck | |
2007-03-06 | Make the maximum number of connections dependant on kern.maxfiles rather | Bob Beck | |
than a hardcoded value. ok reyk@, deraadt@ with knfisms and saner variable names | |||
2007-03-05 | remove -r option that didn't work anyway. | Bob Beck | |
ok jmc@, reyk@ | |||
2007-03-05 | better dd options for the spamd.key generation example. | Reyk Floeter | |
2007-03-05 | document spamd.key better. what format does the file take? how do i | Reyk Floeter | |
create one? and so on... help from jmc@ | |||
2007-03-05 | don't make everything a sync once we see one, reset this once | Bob Beck | |
we save the entry. ok reyk@ | |||
2007-03-05 | spacing | Theo de Raadt | |
2007-03-05 | revert unintentional MAXCON change back to 800, accidentally did last | Bob Beck | |
commit with the U of A value, which may not be safe on all GENERICs with an unmodified kern.maxfiles | |||
2007-03-04 | correct location of spamd.key | Joel Knight | |
2007-03-04 | bob writes some of the most horrid space and tab riddled messy code around | Theo de Raadt | |