Vsevolod Stakhov
f84b86d901
[Rework] Track maps origins
il y a 3 ans
Carsten Rosenberg
b092cecf7f
[Minor] dkim_signing - add list-unsubscribe-post to sign_headers
il y a 3 ans
Vsevolod Stakhov
cddc9021de
[Minor] Dkim: Use IDNA translation in DKIM checks as well
il y a 3 ans
Vsevolod Stakhov
c3c811c767
[Fix] Fix unused results
il y a 3 ans
Vsevolod Stakhov
557c870057
[Project] CDB maps: Start making cdb a first class citizen
il y a 4 ans
Vsevolod Stakhov
1485bf2c42
[Rework] Move local IPs check
il y a 4 ans
Vsevolod Stakhov
41e28d1148
[Rework] Further project structure reorganisation
il y a 4 ans
Vsevolod Stakhov
5f116f6edb
[Minor] Fix dmarc after change
il y a 4 ans
Vsevolod Stakhov
3c4d373392
[Feature] Allow to limit maps per specific worker
il y a 4 ans
Vsevolod Stakhov
66005f3fa3
[Feature] Allow to disable symbols from the metric config
il y a 4 ans
Vsevolod Stakhov
6e31344466
[Minor] Fix compile warnings
il y a 4 ans
Vsevolod Stakhov
d814e862c3
[Fix] Allow to set 0 size for spf/dkim caches
Issue: #2991
il y a 4 ans
Vsevolod Stakhov
9a8b57376c
[Minor] Oops, fix format string
il y a 4 ans
Vsevolod Stakhov
798a6cc321
[Project] Adopt main routines and plugins
il y a 4 ans
Vsevolod Stakhov
6bd388ae93
[Minor] Add flags for rspamd_lua_parse_table_arguments
il y a 4 ans
Vsevolod Stakhov
9895522edd
[Fix] Add missing groups to C callback symbols
il y a 5 ans
Vsevolod Stakhov
d5a36f4f75
[Project] Another iteration
il y a 5 ans
Vsevolod Stakhov
5b1a3846ec
[Rework] Dkim: Remove signing code
il y a 5 ans
Vsevolod Stakhov
eb5fc65aca
[Fix] Do not use lightuserdata for traceback
LuaJIT limits lightuserdata usage to 47 bits. On Arm64, this leads to
break of the C <-> Lua interoperability using this type.
This rework has changed traceback function behaviour from lightuserdata
opaque pointer (GString * in particular) to luaL_Buffer.
Issue: #2906
il y a 5 ans
Vsevolod Stakhov
23a41dae4d
[Minor] Change the default list of oversigned headers
Trivia:
`Subject` header needs to be oversigned as an attacker could add some
'bad' subject to DKIM signed emails with no subject (rare but possible
case). This header is clearly displayed to a user hence, its presence as
well as absence MUST be oversigned explicitly.
`Reply-To` header is widely used to designate a special address used for
replies only but not for authentication checks. It is thus possible to
add a malicious `Reply-To` header to force users to reply to a DKIM
signed email to some attacker's controlled email address. It clearly
opens surface for social engineering like attacks and this header must
thus be unconditionally oversigned even if not presented in an original
message.
Issue: #2887
il y a 5 ans
Vsevolod Stakhov
bc8a0fe1d5
[Minor] Sign list-help header
Issue: #2887
il y a 5 ans
Vsevolod Stakhov
e0d31efc85
[Fix] Change the default oversigning headers to a more sane list
Issue: #2887
il y a 5 ans
Vsevolod Stakhov
c0ac131bcf
[Fix] Fix memory in arc signing logic
il y a 5 ans
heraklit256
df39ac32d6
[Conf] oversign openpgp and autocrypt headers
il y a 5 ans
Vsevolod Stakhov
b4b158a4de
[Minor] Add more logging for DKIM keys caching
il y a 5 ans
Vsevolod Stakhov
cd2f92e40e
[Feature] Support User-Agent in HTTP requests
Issue: #2750
Closes: #2750
il y a 5 ans
Vsevolod Stakhov
085f1f7912
[Minor] Another fix to dkim keys format detection logic
il y a 5 ans
Vsevolod Stakhov
cfc4b20f73
[Fix] Fix HTTP headers signing case
il y a 5 ans
Vsevolod Stakhov
ea07b601a6
[Minor] Move DKIM keys load to DKIM common code
il y a 5 ans
John McKay
bbabe7c61c
Add multiple signature support.
Configuration is not clean and milter doesn't support it yet
il y a 5 ans
John McKay
875f80ee9a
Refactor dkim private key loads
il y a 5 ans
Vsevolod Stakhov
34befc7a81
[Minor] Try better to keep cached records alive
il y a 5 ans
Vsevolod Stakhov
295b806e92
[Minor] Add some fail safety
il y a 5 ans
Vsevolod Stakhov
e5cc4ac8c6
[Fix] Arc: Use a separated list of headers for arc signing
Issue: #2704
Closes: #2704
il y a 5 ans
Vsevolod Stakhov
b48cbdffc0
[Minor] Save dkim check result in mempool variable
il y a 5 ans
Vsevolod Stakhov
b42c97d562
[Project] Rework DKIM checks results
il y a 5 ans
Vsevolod Stakhov
306a8e0c4c
[Feature] Write DKIM selector in dkim allow/reject symbols
il y a 5 ans
Vsevolod Stakhov
4929e73f2b
[Project] Another rework for symbols cache
il y a 5 ans
Vsevolod Stakhov
0c20729f33
[Rework] Add more traces to async events, get rid of GQuarks
il y a 5 ans
Vsevolod Stakhov
4de471ec12
[Minor] More fixes to the internal modules
il y a 5 ans
Vsevolod Stakhov
dec3e60713
[Fix] Various fixes in embedded plugins
il y a 5 ans
Vsevolod Stakhov
a7d6560cfb
[Fix] Fix finalization for internal plugins
il y a 5 ans
Vsevolod Stakhov
f76b158223
[Project] Adopt C modules and stuff
il y a 5 ans
Vsevolod Stakhov
62828baf0e
[Project] Pass cache item to the callback functions
il y a 5 ans
Vsevolod Stakhov
0ef527ac26
[Fix] Fix dependencies for DNS_SIGNED symbol
il y a 5 ans
Vsevolod Stakhov
4c9f6b2118
[Minor] Unify check_auth/check_local options
il y a 5 ans
Vsevolod Stakhov
eb6a122dd3
[Minor] Fix options in dkim checks
il y a 5 ans
Vsevolod Stakhov
8dc7b152a5
[Minor] Fix reload leak in dkim module
il y a 5 ans
Vsevolod Stakhov
1181b74b25
[Project] Make dkim_check context reentrant
il y a 5 ans
Vsevolod Stakhov
67761b7370
[Project] Implement fast module ctx lookup
il y a 5 ans