summaryrefslogtreecommitdiffstats
path: root/libexec/spamd (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* check if the received buffer of a sync element is even big enough toreyk2008-05-071-2/+3
| | | | | | hold the header with length field. ok deraadt@ beck@
* typo, ok beck@grunk2008-03-281-3/+3
|
* simplify the suggested pf ruleset; ok beckjmc2008-01-081-5/+3
|
* Add a missing length check of received spamd sync packet headers.reyk2007-12-271-2/+3
| | | | | From Diego Giagio (dgiagio at gmail) with input from tedu@
* PR 5621 - spamd doesn't clear the last entry from an empty TRAP list,beck2007-11-034-9/+36
| | | | noticed and patch from Piotr Sikora <piotr@sikora.nu>
* use calloc() to avoid malloc(n * m) overflows; checked by djm canacar jsgderaadt2007-09-021-2/+2
|
* - Don't fill spamd debug with bogus config errors if there are noray2007-08-161-7/+7
| | | | | | | | | | traps. - Change count to size_t to avoid a size_t -> int conversion. - Since configure_spamd always returns 0, change to void. - Since configure_spamd now returns void, remove unreachable logging statement. OK ckuethe and deraadt, initial diff from fgsch@ and OKed by beck.
* tweak previous:jmc2007-08-111-3/+3
| | | | | - this document talks about "default mode", not "greylisting mode" - kill trailing whitespace
* Add note to the effect that the spamd pf table is nojsg2007-08-111-2/+6
| | | | | longer used in greylisting mode. ok ckuethe@
* document maximum values for -S and -s;jmc2007-07-071-4/+4
| | | | from Saint Aardvark the Carpeted, documentation/5535;
* s/is is/it is/. From Jim Razmus, jim (at) bonetruck (dot) org; thanks.tom2007-06-251-3/+3
|
* convert to new .Dd format;jmc2007-05-311-2/+2
|
* remove a redundant paragraph; ok beckjmc2007-05-261-9/+2
| | | | also, this section is blacklist-only, so tweak .Sh
* spamd-setup needs -b for blacklist-only mode; from Nick Templetonjmc2007-05-191-1/+5
|
* fix helo to error out if no domain is providedbeck2007-04-131-5/+13
| | | | ok millert@
* rename h_name to sh_name. hname gets redefined in netdb.h to a zerootto2007-04-131-9/+9
| | | | | sized array, so memory corruption occurs when writing the field. problem encountered by Jeremy C. Reed. ok reyk@
* I relinquish any copyright claim I have on this filekjell2007-03-291-2/+2
|
* kill trailing whitespace...shame on me if i sent bob a diff w/jmc2007-03-261-2/+2
| | | | whitespace at eol
* use new license. ok kjell@, who also wanted his name removed, but he needsbeck2007-03-261-20/+12
| | | | to remember how to commit to do that.
* use new license, ok deraadt@beck2007-03-261-19/+11
|
* use new license.beck2007-03-261-20/+12
|
* Copyright - I should share the blame.beck2007-03-261-1/+2
|
* A couple of spamd improvementsbeck2007-03-262-19/+40
| | | | | | | | | | | | | | 1) Implement the NOOP command, which now seems necessary for certain windows mail wrappers and sender verification schemes. Tested by me and sidcarter@symonds.net, who noticed the problem on his site. ok millert@ 2) Change the behaviour of the maxblack parameter, instead of hanging up immediately on new blacklisted connections when the maxblack parameter is reached, we instead make spamd not stutter at them, so the connection is instead completed quickly. This seems to handle peaks and spikes much better than the old way of doing this. ok deraadt@, with some man page changes by jmc@
* Be sure to exit if the db_open of the second db for conversion fails.beck2007-03-181-1/+3
|
* Fix dribbly HMAC leak.beck2007-03-161-1/+3
| | | | ok reyk@
* now that we leave the grey, avoid annoying re-adds of white entriesbeck2007-03-161-3/+25
| | | | | by checking for them being in the db first. ok millert@
* fix -y example;jmc2007-03-151-4/+4
| | | | | closes user/5408 from sthen ok reyk
* when using low prio MX trapping, ignore hosts connecting to the low priobeck2007-03-141-2/+6
| | | | | | mx for the first minute, to avoid problems if hosts legitimately try it after we are down. suggested by millert@
* Don't delete grey entries when whitelisting. They expire anywaybeck2007-03-141-6/+1
| | | | | | | and this hides the evidence. Avoids a potential race when using -M traps where a retry comes in between deletion and whitelisting. ok millert@
* log when we trap a host.beck2007-03-121-1/+3
|
* Add some emphasis for easier reading and clarify MX trapping bymillert2007-03-071-4/+6
| | | | | | explicitly mentioning IP aliases, which is typically how you would implement MX trapping using a single host. OK beck@, trusted by deraadt@
* sync usage(); ok deraadtjmc2007-03-071-4/+4
|
* clean up the greytrap stuff;jmc2007-03-071-29/+27
|
* some spelling fixes;jmc2007-03-071-6/+6
|
* new sentence, new linejmc2007-03-071-6/+12
| | | | kill whitespace at eol
* Add -M option to specify a local address that is a lower priority MXbeck2007-03-064-22/+193
| | | | | | address than the primary one. spamd will trap hosts that contact this address first without first contacting the primary. - get it in, deraadt@
* tweak -c; sort FILES;jmc2007-03-061-4/+6
|
* - move LOGGING into the main bodyjmc2007-03-061-44/+45
| | | | | | | - move some relevant bits of SYNCHRONISATION into -Yy descriptions - tweaks for SYNCHRONISATION ok reyk beck
* document allowing -c to increase to within 200 of kern.maxfilesbeck2007-03-061-2/+2
|
* Make the maximum number of connections dependant on kern.maxfiles ratherbeck2007-03-061-3/+31
| | | | | than a hardcoded value. ok reyk@, deraadt@ with knfisms and saner variable names
* remove -r option that didn't work anyway.beck2007-03-052-15/+4
| | | | ok jmc@, reyk@
* better dd options for the spamd.key generation example.reyk2007-03-051-2/+2
|
* document spamd.key better. what format does the file take? how do ireyk2007-03-051-1/+8
| | | | | | create one? and so on... help from jmc@
* don't make everything a sync once we see one, reset this oncebeck2007-03-051-1/+2
| | | | | we save the entry. ok reyk@
* spacingderaadt2007-03-052-6/+6
|
* revert unintentional MAXCON change back to 800, accidentally did lastbeck2007-03-051-2/+2
| | | | | commit with the U of A value, which may not be safe on all GENERICs with an unmodified kern.maxfiles
* correct location of spamd.keyjoel2007-03-041-2/+2
|
* bob writes some of the most horrid space and tab riddled messy code aroundderaadt2007-03-041-26/+29
|
* Database synchronizaton for spamd/spamlogdbeck2007-03-047-13/+912
| | | | | | | | | | | | | | | | | | | | | | | | | | | This adds an HMAC protected synchronization protocol for use by spamd and spamlogd. - spamd can receive updates from other hosts for GREY, WHITE, and TRAPPED db entries, and will update the local /var/db/spamd accordingly. - spamd can send updates when it makes changes to the GREY or TRAPPED entries in the db to other hosts running spamd. (Note it does not send WHITE entries because the other spamd will see the GREY changes and have complete information to make appropritate decisions) - spamlogd can send updates for WHITE db entries that it performs on the local db to other hosts running spamd, which will then apply them on remote hosts. note that while this diff provides synchronization for changes made to the spamd db by the daemons, it does *not* provide for sychonizing changes to the spamd db made manually with the spamdb command. Synchronization protocol and most of the work by reyk@, with a bunch of the spamd, and spamlogd stuff by me. testing mostly at the U of A, running happily there under big load. ok reyk@ jmc@
* improve the sections on pf rules; ok beckjmc2007-03-021-31/+23
|