Vsevolod Stakhov
f84b86d901
[Rework] Track maps origins
3 年前
Carsten Rosenberg
b092cecf7f
[Minor] dkim_signing - add list-unsubscribe-post to sign_headers
3 年前
Vsevolod Stakhov
cddc9021de
[Minor] Dkim: Use IDNA translation in DKIM checks as well
3 年前
Vsevolod Stakhov
c3c811c767
[Fix] Fix unused results
3 年前
Vsevolod Stakhov
557c870057
[Project] CDB maps: Start making cdb a first class citizen
4 年前
Vsevolod Stakhov
1485bf2c42
[Rework] Move local IPs check
4 年前
Vsevolod Stakhov
41e28d1148
[Rework] Further project structure reorganisation
4 年前
Vsevolod Stakhov
5f116f6edb
[Minor] Fix dmarc after change
4 年前
Vsevolod Stakhov
3c4d373392
[Feature] Allow to limit maps per specific worker
4 年前
Vsevolod Stakhov
66005f3fa3
[Feature] Allow to disable symbols from the metric config
4 年前
Vsevolod Stakhov
6e31344466
[Minor] Fix compile warnings
4 年前
Vsevolod Stakhov
d814e862c3
[Fix] Allow to set 0 size for spf/dkim caches
Issue: #2991
4 年前
Vsevolod Stakhov
9a8b57376c
[Minor] Oops, fix format string
4 年前
Vsevolod Stakhov
798a6cc321
[Project] Adopt main routines and plugins
4 年前
Vsevolod Stakhov
6bd388ae93
[Minor] Add flags for rspamd_lua_parse_table_arguments
5 年前
Vsevolod Stakhov
9895522edd
[Fix] Add missing groups to C callback symbols
5 年前
Vsevolod Stakhov
d5a36f4f75
[Project] Another iteration
5 年前
Vsevolod Stakhov
5b1a3846ec
[Rework] Dkim: Remove signing code
5 年前
Vsevolod Stakhov
eb5fc65aca
[Fix] Do not use lightuserdata for traceback
LuaJIT limits lightuserdata usage to 47 bits. On Arm64, this leads to
break of the C <-> Lua interoperability using this type.
This rework has changed traceback function behaviour from lightuserdata
opaque pointer (GString * in particular) to luaL_Buffer.
Issue: #2906
5 年前
Vsevolod Stakhov
23a41dae4d
[Minor] Change the default list of oversigned headers
Trivia:
`Subject` header needs to be oversigned as an attacker could add some
'bad' subject to DKIM signed emails with no subject (rare but possible
case). This header is clearly displayed to a user hence, its presence as
well as absence MUST be oversigned explicitly.
`Reply-To` header is widely used to designate a special address used for
replies only but not for authentication checks. It is thus possible to
add a malicious `Reply-To` header to force users to reply to a DKIM
signed email to some attacker's controlled email address. It clearly
opens surface for social engineering like attacks and this header must
thus be unconditionally oversigned even if not presented in an original
message.
Issue: #2887
5 年前
Vsevolod Stakhov
bc8a0fe1d5
[Minor] Sign list-help header
Issue: #2887
5 年前
Vsevolod Stakhov
e0d31efc85
[Fix] Change the default oversigning headers to a more sane list
Issue: #2887
5 年前
Vsevolod Stakhov
c0ac131bcf
[Fix] Fix memory in arc signing logic
5 年前
heraklit256
df39ac32d6
[Conf] oversign openpgp and autocrypt headers
5 年前
Vsevolod Stakhov
b4b158a4de
[Minor] Add more logging for DKIM keys caching
5 年前
Vsevolod Stakhov
cd2f92e40e
[Feature] Support User-Agent in HTTP requests
Issue: #2750
Closes: #2750
5 年前
Vsevolod Stakhov
085f1f7912
[Minor] Another fix to dkim keys format detection logic
5 年前
Vsevolod Stakhov
cfc4b20f73
[Fix] Fix HTTP headers signing case
5 年前
Vsevolod Stakhov
ea07b601a6
[Minor] Move DKIM keys load to DKIM common code
5 年前
John McKay
bbabe7c61c
Add multiple signature support.
Configuration is not clean and milter doesn't support it yet
5 年前
John McKay
875f80ee9a
Refactor dkim private key loads
5 年前
Vsevolod Stakhov
34befc7a81
[Minor] Try better to keep cached records alive
5 年前
Vsevolod Stakhov
295b806e92
[Minor] Add some fail safety
5 年前
Vsevolod Stakhov
e5cc4ac8c6
[Fix] Arc: Use a separated list of headers for arc signing
Issue: #2704
Closes: #2704
5 年前
Vsevolod Stakhov
b48cbdffc0
[Minor] Save dkim check result in mempool variable
5 年前
Vsevolod Stakhov
b42c97d562
[Project] Rework DKIM checks results
5 年前
Vsevolod Stakhov
306a8e0c4c
[Feature] Write DKIM selector in dkim allow/reject symbols
5 年前
Vsevolod Stakhov
4929e73f2b
[Project] Another rework for symbols cache
5 年前
Vsevolod Stakhov
0c20729f33
[Rework] Add more traces to async events, get rid of GQuarks
5 年前
Vsevolod Stakhov
4de471ec12
[Minor] More fixes to the internal modules
5 年前
Vsevolod Stakhov
dec3e60713
[Fix] Various fixes in embedded plugins
5 年前
Vsevolod Stakhov
a7d6560cfb
[Fix] Fix finalization for internal plugins
5 年前
Vsevolod Stakhov
f76b158223
[Project] Adopt C modules and stuff
5 年前
Vsevolod Stakhov
62828baf0e
[Project] Pass cache item to the callback functions
5 年前
Vsevolod Stakhov
0ef527ac26
[Fix] Fix dependencies for DNS_SIGNED symbol
5 年前
Vsevolod Stakhov
4c9f6b2118
[Minor] Unify check_auth/check_local options
5 年前
Vsevolod Stakhov
eb6a122dd3
[Minor] Fix options in dkim checks
5 年前
Vsevolod Stakhov
8dc7b152a5
[Minor] Fix reload leak in dkim module
5 年前
Vsevolod Stakhov
1181b74b25
[Project] Make dkim_check context reentrant
5 年前
Vsevolod Stakhov
67761b7370
[Project] Implement fast module ctx lookup
5 年前