Vsevolod Stakhov
f84b86d901
[Rework] Track maps origins
3 vuotta sitten
Carsten Rosenberg
b092cecf7f
[Minor] dkim_signing - add list-unsubscribe-post to sign_headers
3 vuotta sitten
Vsevolod Stakhov
cddc9021de
[Minor] Dkim: Use IDNA translation in DKIM checks as well
3 vuotta sitten
Vsevolod Stakhov
c3c811c767
[Fix] Fix unused results
3 vuotta sitten
Vsevolod Stakhov
557c870057
[Project] CDB maps: Start making cdb a first class citizen
4 vuotta sitten
Vsevolod Stakhov
1485bf2c42
[Rework] Move local IPs check
4 vuotta sitten
Vsevolod Stakhov
41e28d1148
[Rework] Further project structure reorganisation
4 vuotta sitten
Vsevolod Stakhov
5f116f6edb
[Minor] Fix dmarc after change
4 vuotta sitten
Vsevolod Stakhov
3c4d373392
[Feature] Allow to limit maps per specific worker
4 vuotta sitten
Vsevolod Stakhov
66005f3fa3
[Feature] Allow to disable symbols from the metric config
4 vuotta sitten
Vsevolod Stakhov
6e31344466
[Minor] Fix compile warnings
4 vuotta sitten
Vsevolod Stakhov
d814e862c3
[Fix] Allow to set 0 size for spf/dkim caches
Issue: #2991
4 vuotta sitten
Vsevolod Stakhov
9a8b57376c
[Minor] Oops, fix format string
4 vuotta sitten
Vsevolod Stakhov
798a6cc321
[Project] Adopt main routines and plugins
4 vuotta sitten
Vsevolod Stakhov
6bd388ae93
[Minor] Add flags for rspamd_lua_parse_table_arguments
4 vuotta sitten
Vsevolod Stakhov
9895522edd
[Fix] Add missing groups to C callback symbols
4 vuotta sitten
Vsevolod Stakhov
d5a36f4f75
[Project] Another iteration
4 vuotta sitten
Vsevolod Stakhov
5b1a3846ec
[Rework] Dkim: Remove signing code
5 vuotta sitten
Vsevolod Stakhov
eb5fc65aca
[Fix] Do not use lightuserdata for traceback
LuaJIT limits lightuserdata usage to 47 bits. On Arm64, this leads to
break of the C <-> Lua interoperability using this type.
This rework has changed traceback function behaviour from lightuserdata
opaque pointer (GString * in particular) to luaL_Buffer.
Issue: #2906
5 vuotta sitten
Vsevolod Stakhov
23a41dae4d
[Minor] Change the default list of oversigned headers
Trivia:
`Subject` header needs to be oversigned as an attacker could add some
'bad' subject to DKIM signed emails with no subject (rare but possible
case). This header is clearly displayed to a user hence, its presence as
well as absence MUST be oversigned explicitly.
`Reply-To` header is widely used to designate a special address used for
replies only but not for authentication checks. It is thus possible to
add a malicious `Reply-To` header to force users to reply to a DKIM
signed email to some attacker's controlled email address. It clearly
opens surface for social engineering like attacks and this header must
thus be unconditionally oversigned even if not presented in an original
message.
Issue: #2887
5 vuotta sitten
Vsevolod Stakhov
bc8a0fe1d5
[Minor] Sign list-help header
Issue: #2887
5 vuotta sitten
Vsevolod Stakhov
e0d31efc85
[Fix] Change the default oversigning headers to a more sane list
Issue: #2887
5 vuotta sitten
Vsevolod Stakhov
c0ac131bcf
[Fix] Fix memory in arc signing logic
5 vuotta sitten
heraklit256
df39ac32d6
[Conf] oversign openpgp and autocrypt headers
5 vuotta sitten
Vsevolod Stakhov
b4b158a4de
[Minor] Add more logging for DKIM keys caching
5 vuotta sitten
Vsevolod Stakhov
cd2f92e40e
[Feature] Support User-Agent in HTTP requests
Issue: #2750
Closes: #2750
5 vuotta sitten
Vsevolod Stakhov
085f1f7912
[Minor] Another fix to dkim keys format detection logic
5 vuotta sitten
Vsevolod Stakhov
cfc4b20f73
[Fix] Fix HTTP headers signing case
5 vuotta sitten
Vsevolod Stakhov
ea07b601a6
[Minor] Move DKIM keys load to DKIM common code
5 vuotta sitten
John McKay
bbabe7c61c
Add multiple signature support.
Configuration is not clean and milter doesn't support it yet
5 vuotta sitten
John McKay
875f80ee9a
Refactor dkim private key loads
5 vuotta sitten
Vsevolod Stakhov
34befc7a81
[Minor] Try better to keep cached records alive
5 vuotta sitten
Vsevolod Stakhov
295b806e92
[Minor] Add some fail safety
5 vuotta sitten
Vsevolod Stakhov
e5cc4ac8c6
[Fix] Arc: Use a separated list of headers for arc signing
Issue: #2704
Closes: #2704
5 vuotta sitten
Vsevolod Stakhov
b48cbdffc0
[Minor] Save dkim check result in mempool variable
5 vuotta sitten
Vsevolod Stakhov
b42c97d562
[Project] Rework DKIM checks results
5 vuotta sitten
Vsevolod Stakhov
306a8e0c4c
[Feature] Write DKIM selector in dkim allow/reject symbols
5 vuotta sitten
Vsevolod Stakhov
4929e73f2b
[Project] Another rework for symbols cache
5 vuotta sitten
Vsevolod Stakhov
0c20729f33
[Rework] Add more traces to async events, get rid of GQuarks
5 vuotta sitten
Vsevolod Stakhov
4de471ec12
[Minor] More fixes to the internal modules
5 vuotta sitten
Vsevolod Stakhov
dec3e60713
[Fix] Various fixes in embedded plugins
5 vuotta sitten
Vsevolod Stakhov
a7d6560cfb
[Fix] Fix finalization for internal plugins
5 vuotta sitten
Vsevolod Stakhov
f76b158223
[Project] Adopt C modules and stuff
5 vuotta sitten
Vsevolod Stakhov
62828baf0e
[Project] Pass cache item to the callback functions
5 vuotta sitten
Vsevolod Stakhov
0ef527ac26
[Fix] Fix dependencies for DNS_SIGNED symbol
5 vuotta sitten
Vsevolod Stakhov
4c9f6b2118
[Minor] Unify check_auth/check_local options
5 vuotta sitten
Vsevolod Stakhov
eb6a122dd3
[Minor] Fix options in dkim checks
5 vuotta sitten
Vsevolod Stakhov
8dc7b152a5
[Minor] Fix reload leak in dkim module
5 vuotta sitten
Vsevolod Stakhov
1181b74b25
[Project] Make dkim_check context reentrant
5 vuotta sitten
Vsevolod Stakhov
67761b7370
[Project] Implement fast module ctx lookup
5 vuotta sitten