]>
source.dussan.org Git - rspamd.git/log
Vsevolod Stakhov [Sun, 19 May 2019 09:41:02 +0000 (10:41 +0100)]
[Minor] Reformat file to fix tabs/spaces mess
Vsevolod Stakhov [Sun, 19 May 2019 09:35:34 +0000 (10:35 +0100)]
[Fix] Fix some more corner cases for fpconv
Vsevolod Stakhov [Sat, 18 May 2019 14:06:20 +0000 (15:06 +0100)]
[Fix] Avoid another overflow in fpconv
Issue: #2904
Vsevolod Stakhov [Fri, 17 May 2019 10:56:48 +0000 (11:56 +0100)]
[Minor] Try to fix Debian linking issue
Vsevolod Stakhov [Tue, 14 May 2019 09:52:35 +0000 (10:52 +0100)]
[Fix] Arc: Another bunch of fixes for arc signing
Vsevolod Stakhov [Tue, 14 May 2019 08:05:37 +0000 (09:05 +0100)]
[Fix] Arc: More arc signing fixes
Vsevolod Stakhov [Mon, 13 May 2019 20:06:39 +0000 (21:06 +0100)]
[Fix] Fix ARC signing after fixing another bug in it...
Vsevolod Stakhov [Mon, 13 May 2019 14:50:22 +0000 (15:50 +0100)]
[Fix] Ratelimit: Fix dynamic score
Vsevolod Stakhov [Mon, 13 May 2019 13:23:04 +0000 (14:23 +0100)]
Release 1.9.3
* [Conf] Add IP_SCORE_FREEMAIL composite rule
* [Feature] Add cryptobox method to generate dkim keypairs
* [Feature] Add fast hashes to lua cryptobox hash
* [Feature] Add least passthrough results
* [Feature] Allow oversign if exists mode
* [Feature] Clickhouse: Modernise table initial schema
* [Feature] Implement IUF interface for specific fast hashes
* [Feature] Lua_util: Allow to obfuscate different fields
* [Feature] Tune memory management in Rspamd and Lua
* [Fix] Avoid buffer overflow when printing long lua strings
* [Fix] Change the default oversigning headers to a more sane list
* [Fix] Clickhouse: Do not store digest as it is not needed now
* [Fix] Clickhouse: Fix lots of storage issues
* [Fix] Clickhouse: Support custom actions
* [Fix] Deny URLs where hostname is bogus
* [Fix] Do not blacklist mail by SPF/DMARC for local/authed users
* [Fix] Fix DoS caused by bug in glib
* [Fix] Fix UCL parsing of the multiline strings
* [Fix] Fix buffer overflow when printing small floats
* [Fix] Fix init code for servers keypairs cache
* [Fix] Fix issue with urls with no tld (e.g. IP)
* [Fix] Fix memory in arc signing logic
* [Fix] Fix memory leak in language detector during reloads
* [Fix] Fix mixed case content type processing
* [Fix] Fix processing of the ip urls in file
* [Fix] Fix use after free
* [Fix] HTML: Fix `size` attribute processing
* [Fix] Hum, it seems that
99ff1c8 was not correct
* [Fix] Lua_task: Fix task:get_from method
* [Fix] Preserve fd when mapping file to scan
* [Fix] Re-use milter_headers settings when doing arc signing
* [Fix] Set dmarc force action as least action
* [Fix] Switch to GMT
* [Fix] allow PKCS7 signatures to be text/plain, too
* [Project] Add initial version of the vault management tool
* [Project] Add vault support for DKIM and ARC signing
* [Project] Implement keys rotation in the vault
* [Project] Improve dkim keys generation for vault
* [Project] Improve keys creation in rspamadm vault
* [Rework] Move lua_worker to a dedicated unit
* [WebUI] Add URL fragments (#) support
* [WebUI] Fix AJAX request URL
Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
Vsevolod Stakhov [Mon, 13 May 2019 11:38:26 +0000 (12:38 +0100)]
[Fix] Re-use milter_headers settings when doing arc signing
Issue: #2073
Vsevolod Stakhov [Mon, 13 May 2019 10:36:20 +0000 (11:36 +0100)]
[Minor] Change the default list of oversigned headers
Trivia:
`Subject` header needs to be oversigned as an attacker could add some
'bad' subject to DKIM signed emails with no subject (rare but possible
case). This header is clearly displayed to a user hence, its presence as
well as absence MUST be oversigned explicitly.
`Reply-To` header is widely used to designate a special address used for
replies only but not for authentication checks. It is thus possible to
add a malicious `Reply-To` header to force users to reply to a DKIM
signed email to some attacker's controlled email address. It clearly
opens surface for social engineering like attacks and this header must
thus be unconditionally oversigned even if not presented in an original
message.
Issue: #2887
Vsevolod Stakhov [Sun, 12 May 2019 10:08:10 +0000 (11:08 +0100)]
Merge pull request #2897 from moisseev/webui
[WebUI] Add URL fragments (#) support
moisseev [Sun, 12 May 2019 10:00:47 +0000 (13:00 +0300)]
[WebUI] Add URL fragments (#) support
for tab switching
- Show the correct tab when the page is loaded if there is a hash in the URL.
- Changing the hash in the URL when the tab is changed.
- Change the tab when the hash changes in the URL (back / forward buttons).
Vsevolod Stakhov [Sun, 12 May 2019 08:15:41 +0000 (09:15 +0100)]
Merge pull request #2896 from hartzell/typos
[Minor] Fix a couple of typos (separately, transferred)
hartzell [Sun, 12 May 2019 01:22:16 +0000 (18:22 -0700)]
Fix typos (separately, transferred)
Vsevolod Stakhov [Fri, 10 May 2019 16:53:10 +0000 (17:53 +0100)]
[Minor] Fix gc in lua tests
Vsevolod Stakhov [Fri, 10 May 2019 16:40:39 +0000 (17:40 +0100)]
[Minor] Allow to tune GC related options
Vsevolod Stakhov [Fri, 10 May 2019 14:45:01 +0000 (15:45 +0100)]
[Minor] Sign list-help header
Issue: #2887
Vsevolod Stakhov [Fri, 10 May 2019 14:43:36 +0000 (15:43 +0100)]
[Fix] Change the default oversigning headers to a more sane list
Issue: #2887
Vsevolod Stakhov [Fri, 10 May 2019 14:43:23 +0000 (15:43 +0100)]
[Minor] More human friendly stats
Vsevolod Stakhov [Fri, 10 May 2019 12:29:00 +0000 (13:29 +0100)]
[Minor] Jitter gc cycles and fix format string
Vsevolod Stakhov [Fri, 10 May 2019 12:06:23 +0000 (13:06 +0100)]
[Minor] Add some more memory stats logging
Vsevolod Stakhov [Fri, 10 May 2019 12:01:19 +0000 (13:01 +0100)]
[Minor] Misprint
Vsevolod Stakhov [Fri, 10 May 2019 11:44:33 +0000 (12:44 +0100)]
[Feature] Tune memory management in Rspamd and Lua
Vsevolod Stakhov [Thu, 9 May 2019 14:48:11 +0000 (15:48 +0100)]
Merge pull request #2891 from moisseev/webui
[WebUI] Fix AJAX request URL
Vsevolod Stakhov [Thu, 9 May 2019 09:43:12 +0000 (10:43 +0100)]
[Fix] Preserve fd when mapping file to scan
moisseev [Thu, 9 May 2019 09:38:06 +0000 (12:38 +0300)]
[WebUI] Fix AJAX request URL
Fixes: #1552
Vsevolod Stakhov [Wed, 8 May 2019 13:49:05 +0000 (14:49 +0100)]
[Fix] Fix DoS caused by bug in glib
Vsevolod Stakhov [Tue, 7 May 2019 09:17:20 +0000 (10:17 +0100)]
[Minor] Clickhouse: Change default partitioning schema
Vsevolod Stakhov [Mon, 6 May 2019 17:47:31 +0000 (18:47 +0100)]
Merge pull request #2886 from heraklit256/p7s-textplain
[Fix] allow PKCS7 signatures to be text/plain, too
Vsevolod Stakhov [Sun, 5 May 2019 08:26:39 +0000 (09:26 +0100)]
[Minor] Pet luacheck
Vsevolod Stakhov [Sun, 5 May 2019 08:23:51 +0000 (09:23 +0100)]
[Feature] Allow oversign if exists mode
heraklit256 [Sat, 4 May 2019 14:07:34 +0000 (16:07 +0200)]
[Fix] allow PKCS7 signatures to be text/plain, too
heraklit256 [Sat, 4 May 2019 13:53:27 +0000 (13:53 +0000)]
Merge pull request #13 from rspamd/master
merge upstream into local master
Vsevolod Stakhov [Sat, 4 May 2019 13:10:51 +0000 (14:10 +0100)]
[Minor] Allow to get workers count
Vsevolod Stakhov [Sat, 4 May 2019 13:09:35 +0000 (14:09 +0100)]
[Fix] Do not blacklist mail by SPF/DMARC for local/authed users
Issue: #2871
Vsevolod Stakhov [Fri, 3 May 2019 17:47:00 +0000 (18:47 +0100)]
[Minor] Pet luacheck
Vsevolod Stakhov [Fri, 3 May 2019 17:36:19 +0000 (18:36 +0100)]
[Minor] Clickhouse: Add clock skew protection
Vsevolod Stakhov [Fri, 3 May 2019 17:34:29 +0000 (18:34 +0100)]
Revert "[Minor] Return to use of the monotonic timers"
This reverts commit
baa142db22e670b1bc22dc785768141f0ecc1190 .
Vsevolod Stakhov [Fri, 3 May 2019 17:21:19 +0000 (18:21 +0100)]
[Minor] Allow to get memory stats from the workers
Vsevolod Stakhov [Fri, 3 May 2019 17:12:57 +0000 (18:12 +0100)]
[Fix] Clickhouse: Fix lots of storage issues
Vsevolod Stakhov [Fri, 3 May 2019 16:37:31 +0000 (17:37 +0100)]
[Minor] Fix number, sigh
Vsevolod Stakhov [Fri, 3 May 2019 16:26:09 +0000 (17:26 +0100)]
[Fix] Lua_task: Fix task:get_from method
Vsevolod Stakhov [Fri, 3 May 2019 15:22:14 +0000 (16:22 +0100)]
[Minor] Do not stop when cannot parse query string in clang plugin
Vsevolod Stakhov [Fri, 3 May 2019 15:22:07 +0000 (16:22 +0100)]
[Minor] Fix format string
Vsevolod Stakhov [Fri, 3 May 2019 15:02:06 +0000 (16:02 +0100)]
[Minor] Missing include
Vsevolod Stakhov [Fri, 3 May 2019 15:00:24 +0000 (16:00 +0100)]
[Fix] Fix memory leak in language detector during reloads
Vsevolod Stakhov [Fri, 3 May 2019 14:56:30 +0000 (15:56 +0100)]
[Rework] Move lua_worker to a dedicated unit
Vsevolod Stakhov [Fri, 3 May 2019 14:52:27 +0000 (15:52 +0100)]
[Fix] Fix memory in arc signing logic
Vsevolod Stakhov [Fri, 3 May 2019 11:23:15 +0000 (12:23 +0100)]
[Minor] Return to use of the monotonic timers
Vsevolod Stakhov [Fri, 3 May 2019 10:43:37 +0000 (11:43 +0100)]
[Feature] Clickhouse: Modernise table initial schema
Vsevolod Stakhov [Fri, 3 May 2019 10:31:17 +0000 (11:31 +0100)]
[Minor] More url parsing fixes
Vsevolod Stakhov [Fri, 3 May 2019 09:44:12 +0000 (10:44 +0100)]
Merge pull request #2882 from spacefreak86/dynamic_scan
[Major] lua_scanners - fix dynamic scan
Thomas Oettli [Fri, 3 May 2019 09:37:16 +0000 (11:37 +0200)]
[Major] lua_scanners - fix dynamic scan
Vsevolod Stakhov [Thu, 2 May 2019 09:46:01 +0000 (10:46 +0100)]
[Fix] Deny URLs where hostname is bogus
Vsevolod Stakhov [Thu, 2 May 2019 09:38:53 +0000 (10:38 +0100)]
[Minor] Fix OOB access
Vsevolod Stakhov [Thu, 2 May 2019 07:56:23 +0000 (08:56 +0100)]
[Minor] Unbreak generic luajit build
Vsevolod Stakhov [Wed, 1 May 2019 15:49:23 +0000 (16:49 +0100)]
[Minor] Add shrinking failsafety
Vsevolod Stakhov [Wed, 1 May 2019 15:36:49 +0000 (16:36 +0100)]
[Minor] Wipe memory in rspamadm
Vsevolod Stakhov [Wed, 1 May 2019 12:42:33 +0000 (13:42 +0100)]
[Fix] Switch to GMT
Vsevolod Stakhov [Wed, 1 May 2019 12:20:00 +0000 (13:20 +0100)]
[Minor] Propagate images size to html linked images
Vsevolod Stakhov [Tue, 30 Apr 2019 16:42:33 +0000 (17:42 +0100)]
[Minor] Don't add User-Agent in HTTP replies
Vsevolod Stakhov [Tue, 30 Apr 2019 15:49:41 +0000 (16:49 +0100)]
[Minor] Fix vault path
Vsevolod Stakhov [Tue, 30 Apr 2019 15:20:32 +0000 (16:20 +0100)]
[Project] Implement keys rotation in the vault
Vsevolod Stakhov [Tue, 30 Apr 2019 09:56:59 +0000 (10:56 +0100)]
Merge pull request #2878 from HeinleinSupport/dynamic_scan
[Feature] lua_scanners: Implement dynamic scan
Carsten Rosenberg [Mon, 29 Apr 2019 18:10:42 +0000 (20:10 +0200)]
Merge branch 'dynamic_scan' of github.com:HeinleinSupport/rspamd into dynamic_scan
Carsten Rosenberg [Mon, 28 Jan 2019 10:30:33 +0000 (11:30 +0100)]
[Minor] lua_scanners - try dynamic scan
Vsevolod Stakhov [Mon, 29 Apr 2019 17:12:08 +0000 (18:12 +0100)]
[Project] Improve keys creation in rspamadm vault
Vsevolod Stakhov [Mon, 29 Apr 2019 15:37:45 +0000 (16:37 +0100)]
[Conf] Add IP_SCORE_FREEMAIL composite rule
Vsevolod Stakhov [Mon, 29 Apr 2019 13:53:07 +0000 (14:53 +0100)]
[Project] Improve dkim keys generation for vault
Vsevolod Stakhov [Mon, 29 Apr 2019 13:52:50 +0000 (14:52 +0100)]
[Minor] Distinguish vault usage
Vsevolod Stakhov [Mon, 29 Apr 2019 13:52:25 +0000 (14:52 +0100)]
[Minor] Improve lua logging escaping
Vsevolod Stakhov [Mon, 29 Apr 2019 11:27:48 +0000 (12:27 +0100)]
[Minor] Some more additions to least actions processing logic
Vsevolod Stakhov [Mon, 29 Apr 2019 10:41:28 +0000 (11:41 +0100)]
[Minor] Some fixes in least passthrough results processing
Vsevolod Stakhov [Mon, 29 Apr 2019 10:41:14 +0000 (11:41 +0100)]
[Fix] Set dmarc force action as least action
Vsevolod Stakhov [Mon, 29 Apr 2019 08:58:31 +0000 (09:58 +0100)]
[Feature] Add least passthrough results
Vsevolod Stakhov [Sun, 28 Apr 2019 08:35:17 +0000 (09:35 +0100)]
[Minor] Fix vault URL
Vsevolod Stakhov [Sat, 27 Apr 2019 13:54:02 +0000 (14:54 +0100)]
[Fix] HTML: Fix `size` attribute processing
Vsevolod Stakhov [Sat, 27 Apr 2019 11:32:27 +0000 (12:32 +0100)]
[Fix] Fix use after free
Issue: #2867
Closes: #2867
Vsevolod Stakhov [Sat, 27 Apr 2019 08:47:33 +0000 (09:47 +0100)]
[Project] More logic in vault command
Vsevolod Stakhov [Fri, 26 Apr 2019 17:11:30 +0000 (18:11 +0100)]
[Project] Add initial version of the vault management tool
Vsevolod Stakhov [Fri, 26 Apr 2019 15:42:01 +0000 (16:42 +0100)]
[Feature] Add cryptobox method to generate dkim keypairs
Vsevolod Stakhov [Fri, 26 Apr 2019 15:16:54 +0000 (16:16 +0100)]
[Fix] Avoid buffer overflow when printing long lua strings
Vsevolod Stakhov [Fri, 26 Apr 2019 14:24:00 +0000 (15:24 +0100)]
[Minor] Move rspamd_text to a sepatate unit
Vsevolod Stakhov [Fri, 26 Apr 2019 13:03:19 +0000 (14:03 +0100)]
[Minor] Add wipe flag for rspamd_text lua object
Vsevolod Stakhov [Thu, 25 Apr 2019 16:06:34 +0000 (17:06 +0100)]
[Minor] Log the exact address queried on monitored errors
Vsevolod Stakhov [Thu, 25 Apr 2019 14:05:37 +0000 (15:05 +0100)]
[Minor] Increase monitored errors level
Vsevolod Stakhov [Thu, 25 Apr 2019 12:30:24 +0000 (13:30 +0100)]
[Fix] Fix buffer overflow when printing small floats
Vsevolod Stakhov [Thu, 25 Apr 2019 11:23:14 +0000 (12:23 +0100)]
[Fix] Fix UCL parsing of the multiline strings
Vsevolod Stakhov [Thu, 25 Apr 2019 11:13:09 +0000 (12:13 +0100)]
[Minor] Merge OOM fixes from libucl
Vsevolod Stakhov [Wed, 24 Apr 2019 12:37:32 +0000 (13:37 +0100)]
[Minor] Do not use `get_symbol` to check existance
Vsevolod Stakhov [Wed, 24 Apr 2019 09:38:04 +0000 (10:38 +0100)]
[Fix] Fix init code for servers keypairs cache
Vsevolod Stakhov [Tue, 23 Apr 2019 18:41:21 +0000 (19:41 +0100)]
[Fix] Fix processing of the ip urls in file
Vsevolod Stakhov [Tue, 23 Apr 2019 17:41:38 +0000 (18:41 +0100)]
[Minor] Sigh, misprint
Vsevolod Stakhov [Tue, 23 Apr 2019 17:39:08 +0000 (18:39 +0100)]
[Minor] Fix old openssl support
Vsevolod Stakhov [Tue, 23 Apr 2019 17:34:42 +0000 (18:34 +0100)]
[Minor] Fix build
Vsevolod Stakhov [Tue, 23 Apr 2019 17:28:27 +0000 (18:28 +0100)]
[Minor] Improve IUF interface in cryptobox_hash
Vsevolod Stakhov [Tue, 23 Apr 2019 17:17:10 +0000 (18:17 +0100)]
[Feature] Add fast hashes to lua cryptobox hash
Vsevolod Stakhov [Tue, 23 Apr 2019 17:16:49 +0000 (18:16 +0100)]
[Feature] Implement IUF interface for specific fast hashes
Vsevolod Stakhov [Tue, 23 Apr 2019 14:48:53 +0000 (15:48 +0100)]
[Feature] Lua_util: Allow to obfuscate different fields