summaryrefslogtreecommitdiff
path: root/libexec/spamd
AgeCommit message (Collapse)Author
2008-05-22version 2 of spamd sync protocol for two reasons:Theo de Raadt
1) ip addresses were accidentally being sent in host-byte order, which caused compatibility problems (spotted by jbg) 2) the sub-headers in the frame were not natively aligned, thus timeout values were incorrectly sent by 64-bit machines ok beck
2008-05-09As was done in dhcpd, insert pad blocks after sub-messages to keep theTheo de Raadt
structures aligned to 16 byte boundaries for maximum portability (somewhat similar to CMSG's). Old spamd's and new spamd's can still communicate with this change. It would be nice if someone tested spamd on 64-bit unaligned architectures (with and without this change) ok beck
2008-05-07check if the received buffer of a sync element is even big enough toReyk Floeter
hold the header with length field. ok deraadt@ beck@
2008-03-28typo, ok beck@Alexander von Gernler
2008-01-08simplify the suggested pf ruleset; ok beckJason McIntyre
2007-12-27Add a missing length check of received spamd sync packet headers.Reyk Floeter
From Diego Giagio (dgiagio at gmail) with input from tedu@
2007-11-03PR 5621 - spamd doesn't clear the last entry from an empty TRAP list,Bob Beck
noticed and patch from Piotr Sikora <piotr@sikora.nu>
2007-09-02use calloc() to avoid malloc(n * m) overflows; checked by djm canacar jsgTheo de Raadt
2007-08-16- Don't fill spamd debug with bogus config errors if there are noRay Lai
traps. - Change count to size_t to avoid a size_t -> int conversion. - Since configure_spamd always returns 0, change to void. - Since configure_spamd now returns void, remove unreachable logging statement. OK ckuethe and deraadt, initial diff from fgsch@ and OKed by beck.
2007-08-11tweak previous:Jason McIntyre
- this document talks about "default mode", not "greylisting mode" - kill trailing whitespace
2007-08-11Add note to the effect that the spamd pf table is noJonathan Gray
longer used in greylisting mode. ok ckuethe@
2007-07-07document maximum values for -S and -s;Jason McIntyre
from Saint Aardvark the Carpeted, documentation/5535;
2007-06-25s/is is/it is/. From Jim Razmus, jim (at) bonetruck (dot) org; thanks.Tom Cosgrove
2007-05-31convert to new .Dd format;Jason McIntyre
2007-05-26remove a redundant paragraph; ok beckJason McIntyre
also, this section is blacklist-only, so tweak .Sh
2007-05-19spamd-setup needs -b for blacklist-only mode; from Nick TempletonJason McIntyre
2007-04-13fix helo to error out if no domain is providedBob Beck
ok millert@
2007-04-13rename h_name to sh_name. hname gets redefined in netdb.h to a zeroOtto Moerbeek
sized array, so memory corruption occurs when writing the field. problem encountered by Jeremy C. Reed. ok reyk@
2007-03-29I relinquish any copyright claim I have on this fileKjell Wooding
2007-03-26kill trailing whitespace...shame on me if i sent bob a diff w/Jason McIntyre
whitespace at eol
2007-03-26use new license. ok kjell@, who also wanted his name removed, but he needsBob Beck
to remember how to commit to do that.
2007-03-26use new license, ok deraadt@Bob Beck
2007-03-26use new license.Bob Beck
2007-03-26Copyright - I should share the blame.Bob Beck
2007-03-26A couple of spamd improvementsBob Beck
1) Implement the NOOP command, which now seems necessary for certain windows mail wrappers and sender verification schemes. Tested by me and sidcarter@symonds.net, who noticed the problem on his site. ok millert@ 2) Change the behaviour of the maxblack parameter, instead of hanging up immediately on new blacklisted connections when the maxblack parameter is reached, we instead make spamd not stutter at them, so the connection is instead completed quickly. This seems to handle peaks and spikes much better than the old way of doing this. ok deraadt@, with some man page changes by jmc@
2007-03-18Be sure to exit if the db_open of the second db for conversion fails.Bob Beck
2007-03-16Fix dribbly HMAC leak.Bob Beck
ok reyk@
2007-03-16now that we leave the grey, avoid annoying re-adds of white entriesBob Beck
by checking for them being in the db first. ok millert@
2007-03-15fix -y example;Jason McIntyre
closes user/5408 from sthen ok reyk
2007-03-14when using low prio MX trapping, ignore hosts connecting to the low prioBob Beck
mx for the first minute, to avoid problems if hosts legitimately try it after we are down. suggested by millert@
2007-03-14Don't delete grey entries when whitelisting. They expire anywayBob Beck
and this hides the evidence. Avoids a potential race when using -M traps where a retry comes in between deletion and whitelisting. ok millert@
2007-03-12log when we trap a host.Bob Beck
2007-03-07Add some emphasis for easier reading and clarify MX trapping byTodd C. Miller
explicitly mentioning IP aliases, which is typically how you would implement MX trapping using a single host. OK beck@, trusted by deraadt@
2007-03-07sync usage(); ok deraadtJason McIntyre
2007-03-07clean up the greytrap stuff;Jason McIntyre
2007-03-07some spelling fixes;Jason McIntyre
2007-03-07new sentence, new lineJason McIntyre
kill whitespace at eol
2007-03-06Add -M option to specify a local address that is a lower priority MXBob Beck
address than the primary one. spamd will trap hosts that contact this address first without first contacting the primary. - get it in, deraadt@
2007-03-06tweak -c; sort FILES;Jason McIntyre
2007-03-06- move LOGGING into the main bodyJason McIntyre
- move some relevant bits of SYNCHRONISATION into -Yy descriptions - tweaks for SYNCHRONISATION ok reyk beck
2007-03-06document allowing -c to increase to within 200 of kern.maxfilesBob Beck
2007-03-06Make the maximum number of connections dependant on kern.maxfiles ratherBob Beck
than a hardcoded value. ok reyk@, deraadt@ with knfisms and saner variable names
2007-03-05remove -r option that didn't work anyway.Bob Beck
ok jmc@, reyk@
2007-03-05better dd options for the spamd.key generation example.Reyk Floeter
2007-03-05document spamd.key better. what format does the file take? how do iReyk Floeter
create one? and so on... help from jmc@
2007-03-05don't make everything a sync once we see one, reset this onceBob Beck
we save the entry. ok reyk@
2007-03-05spacingTheo de Raadt
2007-03-05revert unintentional MAXCON change back to 800, accidentally did lastBob Beck
commit with the U of A value, which may not be safe on all GENERICs with an unmodified kern.maxfiles
2007-03-04correct location of spamd.keyJoel Knight
2007-03-04bob writes some of the most horrid space and tab riddled messy code aroundTheo de Raadt