Vsevolod Stakhov
f84b86d901
[Rework] Track maps origins
3 лет назад
Carsten Rosenberg
b092cecf7f
[Minor] dkim_signing - add list-unsubscribe-post to sign_headers
3 лет назад
Vsevolod Stakhov
cddc9021de
[Minor] Dkim: Use IDNA translation in DKIM checks as well
3 лет назад
Vsevolod Stakhov
c3c811c767
[Fix] Fix unused results
3 лет назад
Vsevolod Stakhov
557c870057
[Project] CDB maps: Start making cdb a first class citizen
4 лет назад
Vsevolod Stakhov
1485bf2c42
[Rework] Move local IPs check
4 лет назад
Vsevolod Stakhov
41e28d1148
[Rework] Further project structure reorganisation
4 лет назад
Vsevolod Stakhov
5f116f6edb
[Minor] Fix dmarc after change
4 лет назад
Vsevolod Stakhov
3c4d373392
[Feature] Allow to limit maps per specific worker
4 лет назад
Vsevolod Stakhov
66005f3fa3
[Feature] Allow to disable symbols from the metric config
4 лет назад
Vsevolod Stakhov
6e31344466
[Minor] Fix compile warnings
4 лет назад
Vsevolod Stakhov
d814e862c3
[Fix] Allow to set 0 size for spf/dkim caches
Issue: #2991
4 лет назад
Vsevolod Stakhov
9a8b57376c
[Minor] Oops, fix format string
5 лет назад
Vsevolod Stakhov
798a6cc321
[Project] Adopt main routines and plugins
5 лет назад
Vsevolod Stakhov
6bd388ae93
[Minor] Add flags for rspamd_lua_parse_table_arguments
5 лет назад
Vsevolod Stakhov
9895522edd
[Fix] Add missing groups to C callback symbols
5 лет назад
Vsevolod Stakhov
d5a36f4f75
[Project] Another iteration
5 лет назад
Vsevolod Stakhov
5b1a3846ec
[Rework] Dkim: Remove signing code
5 лет назад
Vsevolod Stakhov
eb5fc65aca
[Fix] Do not use lightuserdata for traceback
LuaJIT limits lightuserdata usage to 47 bits. On Arm64, this leads to
break of the C <-> Lua interoperability using this type.
This rework has changed traceback function behaviour from lightuserdata
opaque pointer (GString * in particular) to luaL_Buffer.
Issue: #2906
5 лет назад
Vsevolod Stakhov
23a41dae4d
[Minor] Change the default list of oversigned headers
Trivia:
`Subject` header needs to be oversigned as an attacker could add some
'bad' subject to DKIM signed emails with no subject (rare but possible
case). This header is clearly displayed to a user hence, its presence as
well as absence MUST be oversigned explicitly.
`Reply-To` header is widely used to designate a special address used for
replies only but not for authentication checks. It is thus possible to
add a malicious `Reply-To` header to force users to reply to a DKIM
signed email to some attacker's controlled email address. It clearly
opens surface for social engineering like attacks and this header must
thus be unconditionally oversigned even if not presented in an original
message.
Issue: #2887
5 лет назад
Vsevolod Stakhov
bc8a0fe1d5
[Minor] Sign list-help header
Issue: #2887
5 лет назад
Vsevolod Stakhov
e0d31efc85
[Fix] Change the default oversigning headers to a more sane list
Issue: #2887
5 лет назад
Vsevolod Stakhov
c0ac131bcf
[Fix] Fix memory in arc signing logic
5 лет назад
heraklit256
df39ac32d6
[Conf] oversign openpgp and autocrypt headers
5 лет назад
Vsevolod Stakhov
b4b158a4de
[Minor] Add more logging for DKIM keys caching
5 лет назад
Vsevolod Stakhov
cd2f92e40e
[Feature] Support User-Agent in HTTP requests
Issue: #2750
Closes: #2750
5 лет назад
Vsevolod Stakhov
085f1f7912
[Minor] Another fix to dkim keys format detection logic
5 лет назад
Vsevolod Stakhov
cfc4b20f73
[Fix] Fix HTTP headers signing case
5 лет назад
Vsevolod Stakhov
ea07b601a6
[Minor] Move DKIM keys load to DKIM common code
5 лет назад
John McKay
bbabe7c61c
Add multiple signature support.
Configuration is not clean and milter doesn't support it yet
5 лет назад
John McKay
875f80ee9a
Refactor dkim private key loads
5 лет назад
Vsevolod Stakhov
34befc7a81
[Minor] Try better to keep cached records alive
5 лет назад
Vsevolod Stakhov
295b806e92
[Minor] Add some fail safety
5 лет назад
Vsevolod Stakhov
e5cc4ac8c6
[Fix] Arc: Use a separated list of headers for arc signing
Issue: #2704
Closes: #2704
5 лет назад
Vsevolod Stakhov
b48cbdffc0
[Minor] Save dkim check result in mempool variable
5 лет назад
Vsevolod Stakhov
b42c97d562
[Project] Rework DKIM checks results
5 лет назад
Vsevolod Stakhov
306a8e0c4c
[Feature] Write DKIM selector in dkim allow/reject symbols
5 лет назад
Vsevolod Stakhov
4929e73f2b
[Project] Another rework for symbols cache
5 лет назад
Vsevolod Stakhov
0c20729f33
[Rework] Add more traces to async events, get rid of GQuarks
5 лет назад
Vsevolod Stakhov
4de471ec12
[Minor] More fixes to the internal modules
5 лет назад
Vsevolod Stakhov
dec3e60713
[Fix] Various fixes in embedded plugins
5 лет назад
Vsevolod Stakhov
a7d6560cfb
[Fix] Fix finalization for internal plugins
5 лет назад
Vsevolod Stakhov
f76b158223
[Project] Adopt C modules and stuff
5 лет назад
Vsevolod Stakhov
62828baf0e
[Project] Pass cache item to the callback functions
5 лет назад
Vsevolod Stakhov
0ef527ac26
[Fix] Fix dependencies for DNS_SIGNED symbol
5 лет назад
Vsevolod Stakhov
4c9f6b2118
[Minor] Unify check_auth/check_local options
5 лет назад
Vsevolod Stakhov
eb6a122dd3
[Minor] Fix options in dkim checks
5 лет назад
Vsevolod Stakhov
8dc7b152a5
[Minor] Fix reload leak in dkim module
5 лет назад
Vsevolod Stakhov
1181b74b25
[Project] Make dkim_check context reentrant
5 лет назад
Vsevolod Stakhov
67761b7370
[Project] Implement fast module ctx lookup
5 лет назад