summaryrefslogtreecommitdiff
path: root/libexec
AgeCommit message (Collapse)Author
2007-03-26Do not log when the slave gets killed because of read()Moritz Jodeit
returning 0. This is normal behavior and should not spam the logs. Noticed by henning@ OK henning@ millert@
2007-03-26kill trailing whitespace...shame on me if i sent bob a diff w/Jason McIntyre
whitespace at eol
2007-03-26use new license. ok kjell@, who also wanted his name removed, but he needsBob Beck
to remember how to commit to do that.
2007-03-26use new license, ok deraadt@Bob Beck
2007-03-26use new license.Bob Beck
2007-03-26Copyright - I should share the blame.Bob Beck
2007-03-26A couple of spamd improvementsBob Beck
1) Implement the NOOP command, which now seems necessary for certain windows mail wrappers and sender verification schemes. Tested by me and sidcarter@symonds.net, who noticed the problem on his site. ok millert@ 2) Change the behaviour of the maxblack parameter, instead of hanging up immediately on new blacklisted connections when the maxblack parameter is reached, we instead make spamd not stutter at them, so the connection is instead completed quickly. This seems to handle peaks and spikes much better than the old way of doing this. ok deraadt@, with some man page changes by jmc@
2007-03-22Do not advertise version in the ftp banner, because there is no reason to.Chad Loder
OK mbalmer@, xsa@, henning@, idea prompted by deraadt
2007-03-21remove extra *p tests, from charles longeauTed Unangst
ok deraadt millert
2007-03-18Be sure to exit if the db_open of the second db for conversion fails.Bob Beck
2007-03-16Fix dribbly HMAC leak.Bob Beck
ok reyk@
2007-03-16now that we leave the grey, avoid annoying re-adds of white entriesBob Beck
by checking for them being in the db first. ok millert@
2007-03-15fix -y example;Jason McIntyre
closes user/5408 from sthen ok reyk
2007-03-14when using low prio MX trapping, ignore hosts connecting to the low prioBob Beck
mx for the first minute, to avoid problems if hosts legitimately try it after we are down. suggested by millert@
2007-03-14Don't delete grey entries when whitelisting. They expire anywayBob Beck
and this hides the evidence. Avoids a potential race when using -M traps where a retry comes in between deletion and whitelisting. ok millert@
2007-03-12log when we trap a host.Bob Beck
2007-03-08update to describe current behaviour;Jason McIntyre
with some help from millert and beck
2007-03-07Add some emphasis for easier reading and clarify MX trapping byTodd C. Miller
explicitly mentioning IP aliases, which is typically how you would implement MX trapping using a single host. OK beck@, trusted by deraadt@
2007-03-07Put the workaround back in because gcc fails to build otherwise. ok deraadt@Dale Rahn
2007-03-07sync usage(); ok deraadtJason McIntyre
2007-03-07clean up the greytrap stuff;Jason McIntyre
2007-03-07some spelling fixes;Jason McIntyre
2007-03-07new sentence, new lineJason McIntyre
kill whitespace at eol
2007-03-06Add -M option to specify a local address that is a lower priority MXBob Beck
address than the primary one. spamd will trap hosts that contact this address first without first contacting the primary. - get it in, deraadt@
2007-03-06Revert a workaround that was put in for softfpu ABI violations, hardfp doesnt.Dale Rahn
ok miod.
2007-03-06tweak -c; sort FILES;Jason McIntyre
2007-03-06- move LOGGING into the main bodyJason McIntyre
- move some relevant bits of SYNCHRONISATION into -Yy descriptions - tweaks for SYNCHRONISATION ok reyk beck
2007-03-06document allowing -c to increase to within 200 of kern.maxfilesBob Beck
2007-03-06Make the maximum number of connections dependant on kern.maxfiles ratherBob Beck
than a hardcoded value. ok reyk@, deraadt@ with knfisms and saner variable names
2007-03-05remove -r option that didn't work anyway.Bob Beck
ok jmc@, reyk@
2007-03-05better dd options for the spamd.key generation example.Reyk Floeter
2007-03-05document spamd.key better. what format does the file take? how do iReyk Floeter
create one? and so on... help from jmc@
2007-03-05don't make everything a sync once we see one, reset this onceBob Beck
we save the entry. ok reyk@
2007-03-05nuke annoying debug logBob Beck
ok henning@
2007-03-05Make spamlogd log inbound/outbound like it did before.Bob Beck
ok henning@
2007-03-05spacingTheo de Raadt
2007-03-05revert unintentional MAXCON change back to 800, accidentally did lastBob Beck
commit with the U of A value, which may not be safe on all GENERICs with an unmodified kern.maxfiles
2007-03-04tweaks;Jason McIntyre
2007-03-04correct location of spamd.keyJoel Knight
2007-03-04cleanup usageTheo de Raadt
2007-03-04bob writes some of the most horrid space and tab riddled messy code aroundTheo de Raadt
2007-03-04Database synchronizaton for spamd/spamlogdBob Beck
This adds an HMAC protected synchronization protocol for use by spamd and spamlogd. - spamd can receive updates from other hosts for GREY, WHITE, and TRAPPED db entries, and will update the local /var/db/spamd accordingly. - spamd can send updates when it makes changes to the GREY or TRAPPED entries in the db to other hosts running spamd. (Note it does not send WHITE entries because the other spamd will see the GREY changes and have complete information to make appropritate decisions) - spamlogd can send updates for WHITE db entries that it performs on the local db to other hosts running spamd, which will then apply them on remote hosts. note that while this diff provides synchronization for changes made to the spamd db by the daemons, it does *not* provide for sychonizing changes to the spamd db made manually with the spamdb command. Synchronization protocol and most of the work by reyk@, with a bunch of the spamd, and spamlogd stuff by me. testing mostly at the U of A, running happily there under big load. ok reyk@ jmc@
2007-03-03Build ld.so softfloat for now, lets dynamic linking get further.Dale Rahn
2007-03-02improve the sections on pf rules; ok beckJason McIntyre
2007-03-01first pass at simplifying the language in this page; more to comeJason McIntyre
2007-03-01- use proper log facility and priority in the slave sig handlersOtto Moerbeek
- if the monitor decides to kill the slave, log that ok millert@ moritz@
2007-02-28double word: be beDavid Krause
2007-02-27spacingTheo de Raadt
2007-02-27fix -b breakage - make greylisting actually be on by defaultBob Beck
2007-02-27prevent .Em abuse:Jason McIntyre
.Dq for services .Aq for tables