Carsten Rosenberg
b092cecf7f
[Minor] dkim_signing - add list-unsubscribe-post to sign_headers
3 years ago
Vsevolod Stakhov
cddc9021de
[Minor] Dkim: Use IDNA translation in DKIM checks as well
3 years ago
Vsevolod Stakhov
c3c811c767
[Fix] Fix unused results
3 years ago
Vsevolod Stakhov
557c870057
[Project] CDB maps: Start making cdb a first class citizen
4 years ago
Vsevolod Stakhov
1485bf2c42
[Rework] Move local IPs check
4 years ago
Vsevolod Stakhov
41e28d1148
[Rework] Further project structure reorganisation
4 years ago
Vsevolod Stakhov
5f116f6edb
[Minor] Fix dmarc after change
4 years ago
Vsevolod Stakhov
3c4d373392
[Feature] Allow to limit maps per specific worker
4 years ago
Vsevolod Stakhov
66005f3fa3
[Feature] Allow to disable symbols from the metric config
4 years ago
Vsevolod Stakhov
6e31344466
[Minor] Fix compile warnings
4 years ago
Vsevolod Stakhov
d814e862c3
[Fix] Allow to set 0 size for spf/dkim caches
Issue: #2991
4 years ago
Vsevolod Stakhov
9a8b57376c
[Minor] Oops, fix format string
4 years ago
Vsevolod Stakhov
798a6cc321
[Project] Adopt main routines and plugins
4 years ago
Vsevolod Stakhov
6bd388ae93
[Minor] Add flags for rspamd_lua_parse_table_arguments
5 years ago
Vsevolod Stakhov
9895522edd
[Fix] Add missing groups to C callback symbols
5 years ago
Vsevolod Stakhov
d5a36f4f75
[Project] Another iteration
5 years ago
Vsevolod Stakhov
5b1a3846ec
[Rework] Dkim: Remove signing code
5 years ago
Vsevolod Stakhov
eb5fc65aca
[Fix] Do not use lightuserdata for traceback
LuaJIT limits lightuserdata usage to 47 bits. On Arm64, this leads to
break of the C <-> Lua interoperability using this type.
This rework has changed traceback function behaviour from lightuserdata
opaque pointer (GString * in particular) to luaL_Buffer.
Issue: #2906
5 years ago
Vsevolod Stakhov
23a41dae4d
[Minor] Change the default list of oversigned headers
Trivia:
`Subject` header needs to be oversigned as an attacker could add some
'bad' subject to DKIM signed emails with no subject (rare but possible
case). This header is clearly displayed to a user hence, its presence as
well as absence MUST be oversigned explicitly.
`Reply-To` header is widely used to designate a special address used for
replies only but not for authentication checks. It is thus possible to
add a malicious `Reply-To` header to force users to reply to a DKIM
signed email to some attacker's controlled email address. It clearly
opens surface for social engineering like attacks and this header must
thus be unconditionally oversigned even if not presented in an original
message.
Issue: #2887
5 years ago
Vsevolod Stakhov
bc8a0fe1d5
[Minor] Sign list-help header
Issue: #2887
5 years ago
Vsevolod Stakhov
e0d31efc85
[Fix] Change the default oversigning headers to a more sane list
Issue: #2887
5 years ago
Vsevolod Stakhov
c0ac131bcf
[Fix] Fix memory in arc signing logic
5 years ago
heraklit256
df39ac32d6
[Conf] oversign openpgp and autocrypt headers
5 years ago
Vsevolod Stakhov
b4b158a4de
[Minor] Add more logging for DKIM keys caching
5 years ago
Vsevolod Stakhov
cd2f92e40e
[Feature] Support User-Agent in HTTP requests
Issue: #2750
Closes: #2750
5 years ago
Vsevolod Stakhov
085f1f7912
[Minor] Another fix to dkim keys format detection logic
5 years ago
Vsevolod Stakhov
cfc4b20f73
[Fix] Fix HTTP headers signing case
5 years ago
Vsevolod Stakhov
ea07b601a6
[Minor] Move DKIM keys load to DKIM common code
5 years ago
John McKay
bbabe7c61c
Add multiple signature support.
Configuration is not clean and milter doesn't support it yet
5 years ago
John McKay
875f80ee9a
Refactor dkim private key loads
5 years ago
Vsevolod Stakhov
34befc7a81
[Minor] Try better to keep cached records alive
5 years ago
Vsevolod Stakhov
295b806e92
[Minor] Add some fail safety
5 years ago
Vsevolod Stakhov
e5cc4ac8c6
[Fix] Arc: Use a separated list of headers for arc signing
Issue: #2704
Closes: #2704
5 years ago
Vsevolod Stakhov
b48cbdffc0
[Minor] Save dkim check result in mempool variable
5 years ago
Vsevolod Stakhov
b42c97d562
[Project] Rework DKIM checks results
5 years ago
Vsevolod Stakhov
306a8e0c4c
[Feature] Write DKIM selector in dkim allow/reject symbols
5 years ago
Vsevolod Stakhov
4929e73f2b
[Project] Another rework for symbols cache
5 years ago
Vsevolod Stakhov
0c20729f33
[Rework] Add more traces to async events, get rid of GQuarks
5 years ago
Vsevolod Stakhov
4de471ec12
[Minor] More fixes to the internal modules
5 years ago
Vsevolod Stakhov
dec3e60713
[Fix] Various fixes in embedded plugins
5 years ago
Vsevolod Stakhov
a7d6560cfb
[Fix] Fix finalization for internal plugins
5 years ago
Vsevolod Stakhov
f76b158223
[Project] Adopt C modules and stuff
5 years ago
Vsevolod Stakhov
62828baf0e
[Project] Pass cache item to the callback functions
5 years ago
Vsevolod Stakhov
0ef527ac26
[Fix] Fix dependencies for DNS_SIGNED symbol
5 years ago
Vsevolod Stakhov
4c9f6b2118
[Minor] Unify check_auth/check_local options
5 years ago
Vsevolod Stakhov
eb6a122dd3
[Minor] Fix options in dkim checks
5 years ago
Vsevolod Stakhov
8dc7b152a5
[Minor] Fix reload leak in dkim module
5 years ago
Vsevolod Stakhov
1181b74b25
[Project] Make dkim_check context reentrant
5 years ago
Vsevolod Stakhov
67761b7370
[Project] Implement fast module ctx lookup
5 years ago
Vsevolod Stakhov
5ecb4788ce
[Minor] Properly register DKIM trace symbols
5 years ago