You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

ChangeLog 98KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260
  1. 1.3.1:
  2. * [CritFix] Fix catena passwords validation
  3. * [CritFix] Fix crash when the first received is faked
  4. * [Feature] Add DMARC_BAD_POLICY symbol when DMARC policy was invalid
  5. * [Feature] Allow for matching hostnames in multimap (#773)
  6. * [Feature] Allow for setting action based on DMARC disposition
  7. * [Feature] Allow limiting of the inbound message size
  8. * [Feature] Allow maps with multiple symbols and scores
  9. * [Feature] Allow regexps in the emails maps
  10. * [Feature] Allow to register metric symbols from multimap
  11. * [Feature] Allow to reset redis tokens instead of appendig values
  12. * [Feature] Allow to store strings in radix maps
  13. * [Feature] Check UTF validity when there are utf regexps in a map
  14. * [Feature] Correctly work when there is no hard reject action
  15. * [Feature] Implement dependencies for maps
  16. * [Fix] Another effort to unbreak sqlite locking
  17. * [Fix] Avoid crash when closing mmapped file
  18. * [Fix] Do not break history on NaN in required score
  19. * [Fix] Ensure that hyperscan cache written is written properly
  20. * [Fix] Filter NaN from scores in history
  21. * [Fix] Fix DNSBL maps
  22. * [Fix] Fix another locking issue in sqlite
  23. * [Fix] Fix another locking issue with mapped files
  24. * [Fix] Fix deadlock in mmaped file stats
  25. * [Fix] Fix dependencies in multimap plugin
  26. * [Fix] Fix emails module configuration
  27. * [Fix] Fix greylist plugin (#755)
  28. * [Fix] Fix greylisting plugin variable usage
  29. * [Fix] Fix installed permissions for rspamd_stats
  30. * [Fix] Fix locking in mmapped statistics
  31. * [Fix] Fix paths in tests
  32. * [Fix] Fix prefilter mode for multimap
  33. * [Fix] Forgot to commit leftover changes
  34. * [Fix] Really fix local.d includes
  35. * [Fix] Restore selective greylisting behaviour
  36. * [Fix] Set max size on per connection basis
  37. * [Fix] Use temporary storage for hyperscan cache
  38. * [Rework] Remove systemd socket activation
  39. 1.3.0:
  40. * [CritFix] Fix SA rawbody processing - exclude top part
  41. * [CritFix] Fix decoding of UTF HTML entitles
  42. * [CritFix] Fix encrypted fuzzy requests
  43. * [CritFix] Fix leak of shared memory fds and files
  44. * [CritFix] Fix levenshtein distance calculations
  45. * [CritFix] Fix mime headers processing
  46. * [CritFix] Fix parsing of URLs in texts
  47. * [CritFix] Fix parsing of missing classes
  48. * [CritFix] Fix redis structure by adding {NULL, NULL} member
  49. * [CritFix] Fix some more URL detector issues
  50. * [CritFix] Fix systemd sockets activation
  51. * [CritFix] Fix unencrypted passwords processing in the controller
  52. * [CritFix] Fix writing CDPs to the database
  53. * [CritFix] Fix writing of encrypted HTTP requests
  54. * [CritFix] Plug memory leak in dkim module
  55. * [CritFix] Plug memory leak in headers getting code
  56. * [CritFix] Pre-filters and post-filters were completely broken
  57. * [CritFix] Properly support SA body regexps
  58. * [CritFix] Really skip filters in case of pre-result set
  59. * [CritFix] Restore the intended pre-filters behaviour
  60. * [Rework] Adopt new maps code
  61. * [Rework] Compile ragel sources when building rspamd
  62. * [Rework] Finish rework for the rest of places that use HTTP
  63. * [Rework] Fix DKIM headers canonicalization
  64. * [Rework] Fix lua maps API
  65. * [Rework] Import linenoise for line editing
  66. * [Rework] Include config structure to all rcl handlers
  67. * [Rework] Make chartable module useful
  68. * [Rework] Move http internal structures to a private header
  69. * [Rework] Partly fix controller
  70. * [Rework] Remove dedicated images list
  71. * [Rework] Rename http proxy to rspamd proxy
  72. * [Rework] Rename mime parts structures
  73. * [Rework] Rework HTTP code
  74. * [Rework] Rework exceptions and newlines processing
  75. * [Rework] Rework pre and postfilters system
  76. * [Rework] Separate method to close backend connections
  77. * [Rework] Start the complete maps rework
  78. * [Rework] Use dynamically generated ragel C sources
  79. * [Feature] Add 'blacklist' and 'strict' modes for whitelists
  80. * [Feature] Add 'symbols_enabled' and 'groups_enabled' to settings
  81. * [Feature] Add ESMTPSA received type
  82. * [Feature] Add a simple script to evaluate rspamd rules in the logs
  83. * [Feature] Add a simple tool to generate DKIM keys
  84. * [Feature] Add a trivial heuristic for codepages
  85. * [Feature] Add and use mumhash for non-crypto hashing
  86. * [Feature] Add better method to check lua userdata types
  87. * [Feature] Add better zip files search algorithm
  88. * [Feature] Add catena PBKDF function
  89. * [Feature] Add configuration knobs for in and out parser scripts
  90. * [Feature] Add content filtering support to multimap
  91. * [Feature] Add different timeouts for proxy connections
  92. * [Feature] Add dot commands for lua REPL:
  93. * [Feature] Add execution of lua global functions script
  94. * [Feature] Add function for pretty printing of inet addresses
  95. * [Feature] Add function to convert fstring_t to c string
  96. * [Feature] Add function to create temporary shared memory mapping
  97. * [Feature] Add function to generate random hex string
  98. * [Feature] Add generic fucnction to parse IP maps
  99. * [Feature] Add initial version of HTTP lua repl
  100. * [Feature] Add learn condition to the default configuration
  101. * [Feature] Add learn conditions for classifiers
  102. * [Feature] Add limit for dkim signatures to be checked
  103. * [Feature] Add locking routines for lua_util
  104. * [Feature] Add lua API for getting info from archives
  105. * [Feature] Add lua utility to decode URL encoding
  106. * [Feature] Add method to copy message from http connection
  107. * [Feature] Add mirrors feature
  108. * [Feature] Add more algorithms for shingles generation
  109. * [Feature] Add more domains to redirectors list
  110. * [Feature] Add more encodingsto cryptobox hash API
  111. * [Feature] Add more file utilities to lua_util
  112. * [Feature] Add more functions to extract data from text parts
  113. * [Feature] Add more methods to get headers from a task
  114. * [Feature] Add more methods to init http message body
  115. * [Feature] Add more options for redis config parsing function
  116. * [Feature] Add new representation of email address
  117. * [Feature] Add new symbols to filter bad extensions in messages
  118. * [Feature] Add new utility methods to mimepart object
  119. * [Feature] Add openphish support to rspamd phishing module
  120. * [Feature] Add parsers for SMTP address in ragel
  121. * [Feature] Add parsing of mirror hosts for fuzzy storage
  122. * [Feature] Add parsing scripts for master connection as well
  123. * [Feature] Add preliminary greylist plugin
  124. * [Feature] Add preliminary phishtank support
  125. * [Feature] Add preliminary rarv5 support
  126. * [Feature] Add preliminary version of ssl toolbox
  127. * [Feature] Add protection against open files limit and accepting sockets
  128. * [Feature] Add rar v4 support
  129. * [Feature] Add reading scripts for master connection
  130. * [Feature] Add replies plugin
  131. * [Feature] Add results parsing code
  132. * [Feature] Add routines to compare and check pubkeys
  133. * [Feature] Add simplier versions of refcounts
  134. * [Feature] Add some time manipulation functions for lua APi
  135. * [Feature] Add support for non-standard BATV signatures
  136. * [Feature] Add support of address with at-domain list
  137. * [Feature] Add support to search archives by magic
  138. * [Feature] Add task:get_rawbody method
  139. * [Feature] Add test to check shared memory support sanity
  140. * [Feature] Add the initial version of LUA repl to rspamadm
  141. * [Feature] Add throughput graph for RRD backend to WebUI
  142. * [Feature] Add universal function to make a proper redis request
  143. * [Feature] Add universal function to parse redis servers for plugins
  144. * [Feature] Add util.unlink function
  145. * [Feature] Add utility function to return random number from 0 to 1
  146. * [Feature] Add utility method to convert ftok to C string
  147. * [Feature] Add utility to map shared memory segments
  148. * [Feature] Add versions to fuzzy storage
  149. * [Feature] Add workaround for legacy clients in rspamd proxy
  150. * [Feature] Add workaround for systems without sane shmem support
  151. * [Feature] Add xoroshiro+ fast rng for non-crypto purposes
  152. * [Feature] Adopt plugins for new maps API
  153. * [Feature] Allow SPF to be checked for empty tasks
  154. * [Feature] Allow binary patterns in lua_trie
  155. * [Feature] Allow catena encrypted passwords in controller
  156. * [Feature] Allow client ip match in the settings
  157. * [Feature] Allow easy adding and overriding of fuzzy rules
  158. * [Feature] Allow empty tasks to be processed
  159. * [Feature] Allow hostnames in IP maps
  160. * [Feature] Allow https maps
  161. * [Feature] Allow multiple PBKDF types in `rspamadm pw`
  162. * [Feature] Allow named fuzzy rules
  163. * [Feature] Allow non zero terminated patterns in multipattern
  164. * [Feature] Allow partial hash updates
  165. * [Feature] Allow pipelining for redis.make_request
  166. * [Feature] Allow sending empty requests using client
  167. * [Feature] Allow setting fuzzy flag by symbol not by value
  168. * [Feature] Allow setting scores and actions from lua
  169. * [Feature] Allow shared memory simple http client
  170. * [Feature] Allow static lua files in any parts of rspamd sources
  171. * [Feature] Allow to change flag from fuzzy learn condition
  172. * [Feature] Allow to check rspamd_text using maps
  173. * [Feature] Allow to disable composite rules from settings
  174. * [Feature] Allow to disable some modules from common redis setup
  175. * [Feature] Allow to extract ucl_object from lua using common API
  176. * [Feature] Allow to get settings and settings id hash from lua_task
  177. * [Feature] Allow to have specific settings for mirrored traffic
  178. * [Feature] Allow to open message from a shared memory segment
  179. * [Feature] Allow to parse pubkeys from the rcl config
  180. * [Feature] Allow to pass extradata from rspamd to rmilter
  181. * [Feature] Allow to query storage about number of fuzzy hashes stored
  182. * [Feature] Allow to read logs without symbols scores
  183. * [Feature] Allow to read password from console for rspamc
  184. * [Feature] Allow to set ciphers and CA paths in config
  185. * [Feature] Allow to skip some initialization phases to speed up rspamadm
  186. * [Feature] Allow underscore separated names in settings
  187. * [Feature] Allow versioning for sqlite databases
  188. * [Feature] Always allow to terminate rspamd
  189. * [Feature] Better deal with backend errors
  190. * [Feature] Better lua_redis logging
  191. * [Feature] Configure CA path and ciphers
  192. * [Feature] Create a dedicated parser to strip newlines
  193. * [Feature] Deduplicate the same urls in multimap module
  194. * [Feature] Distinguish luajit from lua
  195. * [Feature] Do not print garbadge in --compact output
  196. * [Feature] Dynamically detect if a CPU is incompatible with hyperscan
  197. * [Feature] Enable forced resolving for some lua plugins
  198. * [Feature] Enable rrd by default
  199. * [Feature] Enable workaround for exim
  200. * [Feature] Fix task functions to work without rspamd_config
  201. * [Feature] Further improvements to chartable module
  202. * [Feature] Further micro-optimizations for hashing and shingles
  203. * [Feature] Further relax parser
  204. * [Feature] Humanize numbers in stats widgets
  205. * [Feature] Implement HTTPS client
  206. * [Feature] Implement SSL support in http client
  207. * [Feature] Implement body rules for the trie plugin
  208. * [Feature] Implement braced regexp quantifiers
  209. * [Feature] Implement compare scripts for mirrors results
  210. * [Feature] Implement compare scripts setup
  211. * [Feature] Implement composites policies
  212. * [Feature] Implement conditional learning for classifiers
  213. * [Feature] Implement constructing of map from UCL
  214. * [Feature] Implement dkim signing in dkim check plugin
  215. * [Feature] Implement fuzzy storage updates
  216. * [Feature] Implement fuzzy updates push protocol
  217. * [Feature] Implement https maps
  218. * [Feature] Implement inter-process maps caching
  219. * [Feature] Implement mapping of remote flags to local flags
  220. * [Feature] Implement mirroring in rspamd proxy
  221. * [Feature] Implement multi-flags fuzzy replies
  222. * [Feature] Implement multiple-sources fuzzy storage
  223. * [Feature] Implement order of pre/post filters
  224. * [Feature] Implement partial deleting for multi-flags
  225. * [Feature] Implement pipelining for redis async interface
  226. * [Feature] Implement ragel parser for received headers
  227. * [Feature] Implement reading of messages to shared memory
  228. * [Feature] Implement refcount for messages
  229. * [Feature] Implement retransmits for master connection
  230. * [Feature] Implement zero-copy mode for HTTP reading
  231. * [Feature] Improve SPF domain detection logic
  232. * [Feature] Improve config:register_symbol function
  233. * [Feature] Improve error report for type missmatch in lua
  234. * [Feature] Improve fstrings API
  235. * [Feature] Improve getting SMTP data from lua_task
  236. * [Feature] Improve levenshtein distance function
  237. * [Feature] Improve logging in proxy and add refcounts
  238. * [Feature] Improve logging lua types
  239. * [Feature] Improve master/slave logging
  240. * [Feature] Improve phishing plugin
  241. * [Feature] Improve phishtank and openphish support
  242. * [Feature] Improve ragel build target
  243. * [Feature] Improve statistics script
  244. * [Feature] Initialize ssl library to use SSL connections
  245. * [Feature] Interpolate points sent to webui
  246. * [Feature] Limit logging of elements that could have too many items
  247. * [Feature] Lock ANN file when loading
  248. * [Feature] New abstract hashing API in cryptobox
  249. * [Feature] Normalize quoted addresses
  250. * [Feature] Now cryptobox lua API accepts rspamd text as input
  251. * [Feature] Optimize alignment to speed up hashing
  252. * [Feature] Parse received date and ESMTPA proto
  253. * [Feature] Parse received timestamp
  254. * [Feature] Pass settings id to log helper
  255. * [Feature] Pass settings id to lua script from log helper
  256. * [Feature] Perform files expansion on proxying
  257. * [Feature] Preliminary implementation of fuzzy master/slave updates
  258. * [Feature] Print userdata using tostring if possible
  259. * [Feature] Propagate HTTP result string when using proxy
  260. * [Feature] Properly implement unweighted round-robin algorithm
  261. * [Feature] Reduce number of timers queries
  262. * [Feature] Rework and improve fuzzy storage
  263. * [Feature] Rework dns resolving API for lua, add 'forced' option
  264. * [Feature] Rework fann module to understand settings
  265. * [Feature] Rework listening system to allow multiple socket types per worker
  266. * [Feature] Rework ratelimit module to set expiration
  267. * [Feature] Save bayes probability in memory pool var
  268. * [Feature] Save settings id hash for convenience
  269. * [Feature] Search for SSL_set_tlsext_host_name support
  270. * [Feature] Send DKIM signature to protocol reply
  271. * [Feature] Show DKIM signature in rspamc client
  272. * [Feature] Show symbols description in scan output
  273. * [Feature] Sign message merely after DKIM check
  274. * [Feature] Simplify machines by assuming that headers are unfolded
  275. * [Feature] Sort symbols when displaying them in log
  276. * [Feature] Split main connection from mirrored connections
  277. * [Feature] Start moving to the new email address structure
  278. * [Feature] Store HTTP headers in a hash table
  279. * [Feature] Store more information about compressed files
  280. * [Feature] Store raw headers value to use them in DKIM
  281. * [Feature] Store text parts content with newlines stripped
  282. * [Feature] Support DKIM signing
  283. * [Feature] Support EXIF jpeg images
  284. * [Feature] Support archive files list extraction
  285. * [Feature] Support archives when matching patterns in multimap
  286. * [Feature] Support premium/academic feed for openphish
  287. * [Feature] Support rspamd_updates via https
  288. * [Feature] Supprort FQDNs in phishing module maps
  289. * [Feature] Try to read on fuzzy timeout to avoid fake timeouts
  290. * [Feature] Try to select the optimal possible function for input
  291. * [Feature] Unescape and unquote smtp addresses
  292. * [Feature] Update fuzzy timestamp when adding value
  293. * [Feature] Update mumhash
  294. * [Feature] Use -flto if possible when optimizations are enabled
  295. * [Feature] Use extended map types in lua map, unify code
  296. * [Feature] Use file lock in logger to avoid deadlocks
  297. * [Feature] Use generic global string split function
  298. * [Feature] Use metrohash as well
  299. * [Feature] Use mumhash by default for incremental hashing
  300. * [Feature] Use mumhash for words hashing
  301. * [Feature] Use new ip parsing API
  302. * [Feature] Use new maps API for local addrs
  303. * [Feature] Use new ragel parser in message parsing code
  304. * [Feature] Use new received parser instead of old one
  305. * [Feature] Use new redis API in DMARC plugin
  306. * [Feature] Use new redis API in greylist plugin
  307. * [Feature] Use new redis API in ip_score plugin
  308. * [Feature] Use new redis API in ratelimit plugin
  309. * [Feature] Use new redis API in replies plugin
  310. * [Feature] Use new version of register_symbol in rspamd plugins
  311. * [Feature] Use offset when passing shm to deal with encrypted requests
  312. * [Feature] Use one pass to remove newlines and store their positions
  313. * [Feature] Use rspamd specific type checks for userdata
  314. * [Feature] Use shared memory storage for http maps
  315. * [Feature] Use universal redis definitions in rspamd plugins
  316. * [Feature] Various improvements in greylist module
  317. * [Feature] Wait for sqlite if locked when switching to WAL mode
  318. * [Fix] Add filenames sanity filtering for mime types
  319. * [Fix] Add guards for empty parts
  320. * [Fix] Add missing types
  321. * [Fix] Add more priority for config file symbols registered from UCL
  322. * [Fix] Add sanity checks when compiling regexp maps
  323. * [Fix] Add spaces instead of newlines to the normalized content
  324. * [Fix] Add workaround for ancient openssl
  325. * [Fix] Add workaround for gmime CTE stupidity
  326. * [Fix] Add workaround for hex digits
  327. * [Fix] Adjust MISSING_MIMEOLE score
  328. * [Fix] Adjust body/body_buf when stealing encrypted message
  329. * [Fix] Adopt lua task API for the new email addresses structure
  330. * [Fix] Allow for disabling DMARC reporting when Redis is configured
  331. * [Fix] Always register openphish and phishtank virtual symbols
  332. * [Fix] Always use shmem on linux
  333. * [Fix] Another change of newlines policy
  334. * [Fix] Another d3evolution update
  335. * [Fix] Another fix for exim workaround
  336. * [Fix] Another fix for legacy clients
  337. * [Fix] Another fix for maps scheduling
  338. * [Fix] Another fix for marking upstreams inactive
  339. * [Fix] Another fix for postfilters
  340. * [Fix] Another fix for redis timeouts
  341. * [Fix] Avoid `table.getn` method as it has been removed in lua 5.3
  342. * [Fix] Avoid double hashing for images
  343. * [Fix] Avoid linking with actrie if hyperscan is enabled
  344. * [Fix] Check copy result when sending message to mirrors
  345. * [Fix] Cleanup message when assiging body
  346. * [Fix] Cleanup stack from global vars
  347. * [Fix] Correctly parse query type
  348. * [Fix] Disable all symbols if enable_groups is found in settings
  349. * [Fix] Disable fts as it is completely broken in bloody linux
  350. * [Fix] Disable multiple autolearn checks
  351. * [Fix] Disallow updates by default
  352. * [Fix] Do not abort when cannot load a map
  353. * [Fix] Do not check recursion for non-DNS SPF record types
  354. * [Fix] Do not delete uninitialized events
  355. * [Fix] Do not die if shmem_mkstemp fails
  356. * [Fix] Do not die when no metrics defined
  357. * [Fix] Do not even try pcre in case of regexp maps
  358. * [Fix] Do not greylist messages if redis has failed somehow
  359. * [Fix] Do not greylist on rejection
  360. * [Fix] Do not leave temporary maps cached
  361. * [Fix] Do not output meaningless errors
  362. * [Fix] Do not send NaN in json
  363. * [Fix] Don't mix hyperscan and pcre processing within a same task
  364. * [Fix] Finally rework and simplify redis backend for statistics
  365. * [Fix] Fix Exim shutdown patch
  366. * [Fix] Fix JIT compilation for PCRE2 expressions
  367. * [Fix] Fix JIT usage for PCRE2
  368. * [Fix] Fix REPL output
  369. * [Fix] Fix SMTP address parsing machine
  370. * [Fix] Fix UTF8 mode in PCRE2
  371. * [Fix] Fix a stupid misprint in word 'phishing'
  372. * [Fix] Fix accepting the first update when local idx is -1
  373. * [Fix] Fix adding maps from ucl
  374. * [Fix] Fix adding upstream to an active queue
  375. * [Fix] Fix and rescore R_PARTS_DIFFER logic
  376. * [Fix] Fix body rules in SA plugin
  377. * [Fix] Fix body start position
  378. * [Fix] Fix border case in urls detector
  379. * [Fix] Fix border cases for incremental hashing
  380. * [Fix] Fix caseless uthash application
  381. * [Fix] Fix chartable issue with starting digits
  382. * [Fix] Fix client_ip in users settings
  383. * [Fix] Fix compilation issue
  384. * [Fix] Fix conditional learning
  385. * [Fix] Fix crash on empty maps
  386. * [Fix] Fix creating of URLs from LUA
  387. * [Fix] Fix creating of temporary shmem segment
  388. * [Fix] Fix creation of mmapped statfiles
  389. * [Fix] Fix descriptors leak on shmem detaching
  390. * [Fix] Fix detaching of shared memory segments
  391. * [Fix] Fix detection of URLs in text parts
  392. * [Fix] Fix directories processing for rspamc
  393. * [Fix] Fix displaying of rewrite subject in WebUI
  394. * [Fix] Fix dkim private keys operations
  395. * [Fix] Fix dkim signing
  396. * [Fix] Fix dynamic scoring of subject symbols
  397. * [Fix] Fix email address build
  398. * [Fix] Fix encrypted proxy requests
  399. * [Fix] Fix errors counting in upstreams
  400. * [Fix] Fix errors handling in the proxy
  401. * [Fix] Fix event bases for IO events
  402. * [Fix] Fix events handling when scheduling map wacth
  403. * [Fix] Fix fann rewrite
  404. * [Fix] Fix files fallback for shmem transfer
  405. * [Fix] Fix fuzzy adding in webui
  406. * [Fix] Fix fuzzy storage encrypted mirroring
  407. * [Fix] Fix fuzzy storage sync replies
  408. * [Fix] Fix handling of the same words
  409. * [Fix] Fix inserting values to the sources list
  410. * [Fix] Fix ipv6 mask application
  411. * [Fix] Fix issue with missing recipients
  412. * [Fix] Fix issues with multiple returns from lua
  413. * [Fix] Fix learning for non-existent backend
  414. * [Fix] Fix legacy clients support in proxy
  415. * [Fix] Fix length calculations for shared memory segments
  416. * [Fix] Fix listening on UDP sockets
  417. * [Fix] Fix loading of file maps
  418. * [Fix] Fix long regexp flags (e.g. {sa_body})
  419. * [Fix] Fix lua compare function init
  420. * [Fix] Fix maps descriptions
  421. * [Fix] Fix maps locking
  422. * [Fix] Fix max_train setup in ANN module
  423. * [Fix] Fix memory corruption
  424. * [Fix] Fix memory leak in unsigned maps reading
  425. * [Fix] Fix misprints for lto usage
  426. * [Fix] Fix more issues with scripts processing
  427. * [Fix] Fix next-to-last extension length check
  428. * [Fix] Fix openssl initialization
  429. * [Fix] Fix order of arguments
  430. * [Fix] Fix order of initialization
  431. * [Fix] Fix parser
  432. * [Fix] Fix parsing of binary tries
  433. * [Fix] Fix parsing of braced IPv6 addresses
  434. * [Fix] Fix parsing of nested braces in SMTP comments
  435. * [Fix] Fix parsing of rarv5 archives
  436. * [Fix] Fix periodic scheduling when a map is not modified
  437. * [Fix] Fix possible FP in TRACKER_ID rule
  438. * [Fix] Fix post-filters processing
  439. * [Fix] Fix potential NULL dereference
  440. * [Fix] Fix processing of <br> and <hr> tags
  441. * [Fix] Fix processing of addresses in protocol
  442. * [Fix] Fix processing of messages without received headers
  443. * [Fix] Fix proxying issue for unconnected sessions
  444. * [Fix] Fix proxying of the encrypted messages
  445. * [Fix] Fix race condition with shared memory by refcounts
  446. * [Fix] Fix ratelimit initialization
  447. * [Fix] Fix redis set request in replies plugin
  448. * [Fix] Fix redis timeout events handling
  449. * [Fix] Fix redis timeouts processing logic
  450. * [Fix] Fix refcounts in lua_redis
  451. * [Fix] Fix results checking if no master connection is active
  452. * [Fix] Fix return value for couple of lua functions
  453. * [Fix] Fix round-robin selection when upstreams have no weight
  454. * [Fix] Fix rows calculation in graph
  455. * [Fix] Fix rspamd_redis_make_request syntax in replies plugin
  456. * [Fix] Fix scheduling of locked map events
  457. * [Fix] Fix scores detection
  458. * [Fix] Fix searching for newline positions
  459. * [Fix] Fix secure_ip setting in controller
  460. * [Fix] Fix sending data to graph command
  461. * [Fix] Fix setting of score for parts differ
  462. * [Fix] Fix setting of the lua top
  463. * [Fix] Fix setting path for lua
  464. * [Fix] Fix setting path for phishtank
  465. * [Fix] Fix settings application
  466. * [Fix] Fix shm_open call as described in POSIX
  467. * [Fix] Fix size of length in fuzzy mirror wire protocol
  468. * [Fix] Fix smtp grammar issues
  469. * [Fix] Fix some issues with redis API
  470. * [Fix] Fix some issues with retries in the proxy
  471. * [Fix] Fix stack growing
  472. * [Fix] Fix start of body detection in DKIM
  473. * [Fix] Fix state on timeout
  474. * [Fix] Fix stats script
  475. * [Fix] Fix substring search when there are '\0' in strings
  476. * [Fix] Fix symbol name for spf soft fail
  477. * [Fix] Fix symbol type's check
  478. * [Fix] Fix symbols registration and execution
  479. * [Fix] Fix the case of multiple values keys
  480. * [Fix] Fix the default symbol names according to metric
  481. * [Fix] Fix timeout setup on learning
  482. * [Fix] Fix timeouts in redis cache processing
  483. * [Fix] Fix timeouts processing in lua_redis
  484. * [Fix] Fix upstreams interaction for rspamd proxy
  485. * [Fix] Fix usage of rdns reply structure
  486. * [Fix] Fix varargs loop
  487. * [Fix] Fix whitelists and blacklists in SA rules
  488. * [Fix] Fix write servers setup for redis
  489. * [Fix] Fix writing of HTTP messages
  490. * [Fix] Force rspamd to upgrade fuzzy db on opening
  491. * [Fix] Free the correct pointer
  492. * [Fix] Further fixes for lto and static linking
  493. * [Fix] Further fixes for surbl extensions map
  494. * [Fix] Further fixes in maps code
  495. * [Fix] Further improvements to error messages in fuzzy check
  496. * [Fix] Further tweaks to redis garbadge collection
  497. * [Fix] Groups are now case insensitive
  498. * [Fix] Handle log pipe read errors
  499. * [Fix] Handle nested dependencies in SpamAssassin plugin
  500. * [Fix] Implement new automata to skip empty lines for dkim signing
  501. * [Fix] Improve error messages on fuzzy add
  502. * [Fix] Improve lua redis handling
  503. * [Fix] Improve phishing module logging
  504. * [Fix] Improve printing of fuzzy errors
  505. * [Fix] Improve rrd diagnostic errors
  506. * [Fix] Improve strcase hash used in uthash
  507. * [Fix] Include fuzzy key to distinguish storages with different keys
  508. * [Fix] Include slave cluster name into http request
  509. * [Fix] Include some more information about archives
  510. * [Fix] Indicate upstream error on timeout
  511. * [Fix] Initialize hash tables array to avoid crashes
  512. * [Fix] Initialize parser scripts properly
  513. * [Fix] Initialize vars to avoid warnings
  514. * [Fix] Inverse logic for saving ANN
  515. * [Fix] Link lpeg to rspamd lua library
  516. * [Fix] Make extension checks case-insensitive
  517. * [Fix] Mark expired hashes as not found and not as zero flag
  518. * [Fix] Match archive name as well
  519. * [Fix] More and more fixes to redis states
  520. * [Fix] More fixes about shared memory in proxy
  521. * [Fix] More fixes for redis refcounts
  522. * [Fix] More fixes to end of headers detection
  523. * [Fix] More fixes to events logic
  524. * [Fix] More fixes to multi-flag fuzzy storage
  525. * [Fix] More fixes to parts distance calculations
  526. * [Fix] More guards for redis free
  527. * [Fix] One more fix in redis destructor
  528. * [Fix] One more try to fix redis
  529. * [Fix] PIE is required for static build
  530. * [Fix] Partial fix for mmap'd statistics tests
  531. * [Fix] Plug memory leak in proxy
  532. * [Fix] Properly detect end of headers position
  533. * [Fix] Properly init and free session structures
  534. * [Fix] Reduce PRECEDENCE_BULK rule weight
  535. * [Fix] Reduce the default thresholds for learning
  536. * [Fix] Remove Type=forking from systemd unit file (#709)
  537. * [Fix] Remove bad FANN file to save computational resources
  538. * [Fix] Remove event before closing of fd to avoid race conditions
  539. * [Fix] Remove parsing of 'from' variable in redis backend
  540. * [Fix] Remove some bad domains from whitelists
  541. * [Fix] Repair optional dependencies
  542. * [Fix] Reset master connection when retransmitting scan request
  543. * [Fix] Restore ONCE_RECEIVED symbol
  544. * [Fix] Restore compatibility with old lua API behaviour
  545. * [Fix] Restore redis runtime state
  546. * [Fix] Reverse options when received
  547. * [Fix] Send updates to mirrors only if we have some changes
  548. * [Fix] Set host attribute properly when making HTTP request from lua
  549. * [Fix] Set terminated state before calling of async free
  550. * [Fix] Simplify MISSING_MIMEOLE rule
  551. * [Fix] Simplify state machine by ignoring multiple spaces
  552. * [Fix] Skip setting RPATH for static builds
  553. * [Fix] Slightly reduce weights of rules with high FP rate
  554. * [Fix] Some fixes to libmagic initialization
  555. * [Fix] Some more fixes to ratelimit plugin
  556. * [Fix] Strip '\r\n' properly
  557. * [Fix] Switch hashes to mumhash
  558. * [Fix] Treat NaN values properly in graph command
  559. * [Fix] Try to avoid FP when checking for phished URLs
  560. * [Fix] Try to avoid recursive events deletions
  561. * [Fix] Try to fix false positive URL detections in text parts
  562. * [Fix] Try to fix issue in redis stats backend when task is closed
  563. * [Fix] Try to fix proxying of stupid spamc protocol to HTTP mirrors
  564. * [Fix] Try to fix redis crashes
  565. * [Fix] Try to fix upstreams with one element
  566. * [Fix] Try to handle multiline history in a more sane way
  567. * [Fix] Unbreak build on gcc < 4.9
  568. * [Fix] Update RPM spec/sources (#700)
  569. * [Fix] Update d3evolution version
  570. * [Fix] Update mumhash implementation
  571. * [Fix] Use custom error function for pre and post filters
  572. * [Fix] Use new postfilters and prefilters API in the plugins
  573. * [Fix] Use non-blocking mode for systemd sockets
  574. * [Fix] Use shared memory merely for local backends in the proxy
  575. * [Fix] Use watchers for spf plugin
  576. * [Fix] Varioud fixes to the maps code
  577. 1.2.8:
  578. * Another fix for exim workaround (#637)
  579. * Fix unencrypted passwords processing in the controller
  580. * Fix setting path for lua (#652)
  581. * Fix usage of rdns reply structure (#654)
  582. * Use file lock in logger to avoid deadlocks
  583. * Add `application/octet-stream` mime type for `pdf` extension (by @moisseev)
  584. * Implement new automata to skip empty lines for dkim signing (#651)
  585. * Fix parsing of missing classes
  586. * Clarify some rspamc arguments (by @fatalbanana)
  587. * Correct suppress spelling
  588. 1.2.7:
  589. * Slightly reduce weights of rules with high FP rate
  590. * Add workround for rspamd-1.3
  591. * Fix possible FP in TRACKER_ID rule
  592. * Simplify MISSING_MIMEOLE rule
  593. * Add workaround for gmime CTE stupidity
  594. * Fix mime headers processing
  595. * Fix false positive URL detections in text parts
  596. * Fix Exim shutdown patch
  597. * Enable workaround for exim mailbox format
  598. * Backport shingles static test
  599. * Fix levenshtein distance calculations
  600. * Fix max_train setup in ANN module
  601. * Fix redis structure by adding {NULL, NULL} member
  602. * Fix build with unmodified LibreSSL opensslv.h
  603. * Repair optional dependencies
  604. * Really skip filters in case of pre-result set
  605. * Restore the intended pre-filters behaviour
  606. * Fix ipv6 mask application
  607. 1.2.6:
  608. * Fix parsing of URLs in texts
  609. * Fix creating of URLs from LUA
  610. * Fix some more URL detector issues
  611. * Fix unit tests
  612. * Fix JIT compilation for PCRE2 expressions
  613. * Fix JIT usage for PCRE2
  614. * Fix UTF8 mode in PCRE2
  615. * Add workaround for pre-historic compilers (#605)
  616. * Fix and rescore R_PARTS_DIFFER logic
  617. * Properly set lua paths for tests
  618. * Fix SA rawbody processing - exclude top part
  619. * Store text parts content with newlines stripped
  620. * Properly support SA body regexps
  621. * Fix body rules in SA plugin
  622. * Fix setting of score for parts differ
  623. * More fixes to parts distance calculations
  624. - Use hashed words instead of full words for speed
  625. - Improve levenstein distance calculations and penalise replaces
  626. - Always return number from 0 to 1
  627. - Use g_malloc instead of alloca
  628. * Fix percents output in R_PARTS_DIFFER
  629. * Plug memory leak in dkim module
  630. * Plug minor memory leak in regexps creation
  631. 1.2.5:
  632. * Plug an important memory leak in headers getting code
  633. * Remove some bad domains from whitelists
  634. 1.2.4:
  635. * Implement new multipattern matcher that uses hyperscan if possible
  636. * Use mutlipattern for lua_trie code
  637. * Add utility methods for multipattern
  638. * Use multipattern in url matcher
  639. * Add escape functions for hyperscan
  640. * Allow to optimize lua -> C transition by flattening table args
  641. * Optimize hot paths in SA plugin
  642. * Optimize rspamd_re_cache_type_from_string
  643. * Allow empty tries
  644. * Fix extraction of URLs from Subject
  645. * Allow to have different flags for different patterns in multipattern
  646. * Add common directory for hyperscan cache to config
  647. * Implement caching for hyperscan multipattern
  648. * Attach domain part to `R_SUSPICIOUS_URL` (by @moisseev)
  649. * Allow multipattern scans to be nested for the case of hyperscan
  650. * Simplify SURBL redirector search code and avoid ac_trie
  651. * Add two way substring search algorithm
  652. * Avoid acism usage to find gtube pattern
  653. * Fix processing of empty headers
  654. * Allow to disable pthread mutexes on broken platforms
  655. * Make web interface not send password in query strings (#585) by @fatalbanana
  656. * Add maximum delay to ratelimit module
  657. * Backport fix for empty files inclusion from libucl
  658. * Fix settings id setup
  659. * Add min_learns option to classifiers
  660. * Use more clever to utf8 conversion strategy
  661. * Fix disabling of virtual symbols in the settings
  662. * Rework settings to work properly in metric-less configuration
  663. * Set the default limit for classifier
  664. * Fix ttl based expiration from LRU cache
  665. * Rework DKIM module to use OpenSSL for digests
  666. * Fix mailto urls parsing with hyperscan
  667. * Do not set obscured flag for urls starting with spaces
  668. * Fix crash on redis learn
  669. * Fix ratelimit ctime setting
  670. 1.2.3:
  671. * New DCC module (by @smfreegard)
  672. * Rework whitelist module:
  673. - Now we check different elements for different checks
  674. - MIME from for DMARC
  675. - DKIM signature domain for DKIM
  676. - SMTP from or HELO for SPF
  677. * Fix regexps results combination (*critical*)
  678. * Fix issue with expressions processing (*critical*)
  679. * Optimize strlcpy for aligned input
  680. * Add support of half-closed connection in lua_tcp
  681. * Allow to print compact json in client
  682. * Save required score in history (#581)
  683. * Allow to attach file descriptors to control commands
  684. * Allow to send descriptors from workers to main
  685. * Allow to attach fd when broadcasting to workers
  686. * Implement log pipe feature for rspamd logs analysis
  687. * Add `log_helper` worker
  688. * Add `URIBL_SBL_CSS` (by @smfreegard)
  689. * Add worker scripts functionality
  690. * Add on load hooks for rspamd_config
  691. * Add lua scripts for log_helper worker
  692. * Add generic maillist detector (#584)
  693. * Implement FANN autolearn using log_helper worker
  694. * Rework metrics configuration to allow includes
  695. * Change default value of forced removal in composite rules
  696. * Allow to use assembly version of blake2b on x86 cpu
  697. * Use less precise (but faster) clock if possible
  698. * Insert redirected URL to the urls list
  699. * Allow to get and set callback data for rspamd symbols
  700. * Add binary heap implementation
  701. * Use binary heap for expire algorithms in the hash
  702. * Use `least frequent used` expiration strategy
  703. * Allow to get mime headers from a task
  704. * Add support for mime headers in `regexp` module
  705. * Update Exim patches (by @fatalbanana)
  706. * Allow building rspamd with jemalloc
  707. * Save multipart boundaries
  708. * SA plugin changes:
  709. - Properly handle MIME headers
  710. - Fix eval:check_for_missing_to_header rule
  711. - Implement SA compatible body regexps
  712. - Use sabody rules in SA plugin
  713. * LUA API changes:
  714. - Add util.get_ticks function
  715. - Add util.stat function
  716. - Add task:get_symbols_numeric method
  717. - Add method to get number of symbols in the cache
  718. - Add lua methods to get redirected urls
  719. - Allow to get callbacks for lua symbols
  720. - Add config:set_symbol_callback function
  721. 1.2.2:
  722. * Use HTTP Content-Type on non mime input if possible
  723. * Save log level when compressing log messages
  724. * Further rework of composite rules (add '^' prefix)
  725. * Add tracking for rspamd expressions
  726. * Store actions limits in metric result
  727. * Fix parsing of include/redirect with many records in SPF
  728. * Add method to disable symbols execution in the cache
  729. * Allow to disable checks from settings
  730. * Allow to select settings by id in HTTP query
  731. * Find URLs with '\r' and '\n' inside href attribute
  732. * Implement vectored mode for hyperscan (experimental)
  733. * Improve client connection errors diagnostics
  734. * Allow to edit new files with signtool
  735. * Improve hashes performance on 32 bit platforms
  736. * Fix sorting of limits
  737. * Remove slow and unused rules `INVALID_EXIM_RECEIVED*`
  738. * Add expression:process_traced lua method
  739. * Allow tables in task:insert_result
  740. * Save trace for SA metas
  741. * Do not parse broken TLD parts in URLs
  742. * Investigate many border cases in URLs parser
  743. 1.2.1:
  744. * Add list support to `mime types` module configuration (by @moisseev)
  745. * Allow symbols params to be printed in logs
  746. * Fix `MIME_BAD_ATTACHMENT` false positives for MDN/DSN
  747. * Fix crashes on arm32
  748. * Do not classify message if some class is missing
  749. * Fix cryptobox cleanup
  750. * Remove multipart/report from bad mime types (#569)
  751. * Improve logging for fuzzy hashes
  752. * Show map URLs in webui
  753. * Sort symbols in webui
  754. 1.2.0:
  755. * New dynamic updates plugin
  756. * Regular expressions map support
  757. * Faster radix trie algorithm
  758. * Faster siphash for AVX2 supporing CPUs (used in fuzzy hashes)
  759. * PCRE2 support
  760. * Allow quoted and slashed keys in map
  761. * Add proper support of DNS resolvers balancing (#552)
  762. * Rework includes and configuration system for better local changes support
  763. * New keypairs framework for signing and encryption
  764. * Added support for dynamic modules and workers
  765. * Allow to dump configuration with help comments
  766. * Rework once_received module
  767. - Fix priority for `good_hosts`
  768. - If a good host has been found do not add once_received symbols
  769. - Fix priorities for strict once_received
  770. - Add ability to whitelist IP addresses
  771. * Implement support of signed maps for HTTP and file maps
  772. * Add command to sync fuzzy storage (#533)
  773. * Rework system of symbols and actions registration
  774. It is possible now to use priorities when adding symbols to metrics and
  775. override scores for symbols with lower priority with the scores with
  776. high priority.
  777. * Add auth support and db selection for redis stats
  778. * Improve composite rules application
  779. * Add ignore_received option
  780. * Fix critical issue with inconsistent resorting
  781. * Fix `all` in spf redirects
  782. * Add punycoded versions for IDN domains (#554)
  783. * Improve sorting order for symbols cache
  784. * Add lockless logging for processes management
  785. * Allow to specify flags for metric symbols
  786. * Load images height and width from style attribute (#538)
  787. * Override DNS requests limits for SPF and DKIM
  788. * Fix resetting symbols to their default values in WebUI
  789. * Improve configuration agility for redis stats
  790. * Allow to set db and password for redis in stat_convert
  791. * Import the latest libucl
  792. * LUA API changes:
  793. - Add rspamd_version function to LUA API
  794. - Add lua_cryptobox module
  795. - Add lua_map module
  796. - Add task:set_metric_action lua API method
  797. - Fix race condition in lua_tcp module
  798. - Fix a lot of issues in lua_redis module
  799. - Rework and abstract lua maps API
  800. - Add util.strlen_utf8 lua function
  801. - Add lua functions for caseless comparison
  802. - Allow optional symbols registration
  803. - Add config:add_map table form method, add regexp maps
  804. - Add task:has_urls method
  805. - Add task:has_flag method
  806. - Add html tags methods to lua_html
  807. - Add task:get_dns_req
  808. * Plugins changes:
  809. - Add support for WLBLEval SA plugin
  810. - Use caseless comparison in SA and DMARC plugins
  811. - Allow SA plugin to set scores for rspamd symbols
  812. - Add regexp maps support to multimap
  813. - Allow filenames match in multimap
  814. - Add more filters for the existing map types
  815. - Fix html images rules to reduce FP rates
  816. * New rules:
  817. - LONG_SUBJ - too long subject
  818. - MIME_BAD_ATTACHMENT - bad attachement type
  819. - RDNS_NONE - no reverse DNS record for sender's IP
  820. - Fix MISSING_MIMEOLE rule for modern OE
  821. * Many other bugfixes, memory leaks plugs thanks to:
  822. - Coverity scan
  823. - New gcc-6 warnings
  824. - valgrind manual iterations
  825. * Documentation improvements:
  826. - FAQ list: https://rspamd.com/doc/faq.html
  827. - Reworked quick start guide
  828. - Added documentation for all active modules
  829. * Other changes:
  830. - Dropped Ubuntu Vivid support
  831. - Added Ubuntu Xenial support
  832. - Rework build system for rspamd and rmilter
  833. 1.1.4:
  834. * Print traceback on lua errors in lua config
  835. * Fix leaks in lua error paths
  836. * Improve 'R_EMPTY_IMAGE' rule
  837. * Fix metas memoization in SA plugin
  838. * Properly set `flag` in fuzzy replies
  839. * Fix arguments order
  840. * Fix issue with out-of-boundary reading
  841. * Fix issues found by coverity
  842. * Same result checking error found by coverity
  843. * Fix varargs processing (found by coverity)
  844. * Fix error in printing hex
  845. * Reduce weights for some hfilter patterns
  846. * Add aliases for task:get_from_ip:
  847. - task:get_addr
  848. - task:get_from_addr
  849. - task:get_ip
  850. * Rework once_received module
  851. - Fix priority for `good_hosts`
  852. - If a good host has been found do not add once_received symbols
  853. - Fix priorities for strict once_received
  854. - Add ability to whitelist IP addresses
  855. * Fix `MISSING_MIMEOLE` rule for modern OE
  856. * Treat meta tags as embedded tags (#501)
  857. 1.1.3:
  858. * Fix DSN rules when SMTP from is unavailable
  859. * Fix statconvert routine to avoid lua module usage
  860. * Set a sane quark for configtest to avoid NULL to be printed in logs
  861. * Support c11 if available
  862. * Fix parsing of ip:port strings
  863. * Add more diagnostic for lua subr errors
  864. * Fix task:set_from_ip lua method
  865. * Add basic routines for digital signatures
  866. * Add tool for digital signatures
  867. * Add plain open file API method for atomic open
  868. * Fix parsing nested braces inside logger vars
  869. * Pre filters now actually skip processing
  870. * Add pre-filter mode for multimap
  871. * Switch to apache 2 license
  872. 1.1.2:
  873. * Fix stat_cache closing
  874. * Add checkpoints to sqlite3 learn cache
  875. * Do not recompile lua generated headers all the time
  876. * Increase number of messages learned
  877. * Fix issues with dual stack and hfilter
  878. * Disable MID checks for hfilter by default
  879. * Fix cache definitions in multiple classifier and no type
  880. * Don't crash if learn cache failed to initialize
  881. * Fix googlegroups support in maillist plugin
  882. * Rework flags LUA API:
  883. - Allow to check for a specific flag
  884. - Add `learn_spam`, `learn_ham` and `broken_headers` flags
  885. - Unify internal functions
  886. * Add `BROKEN_HEADERS` rule
  887. * Add support for forged confirmation headers (by @AdUser)
  888. * Allow `any`, `mime` and `smtp` for get_from/get_recipients
  889. * Add mime types checking plugin
  890. * Add rule to detect spammers attempts to cheat mime parsing
  891. * Rework parsing of IP addresses in configuration (better IPv6 support)
  892. * Add `util.parse_mail_address` function to LUA API
  893. * Add lua sqlite3 module
  894. * Implement synchronous redis call
  895. * Ratelimit: avoid possible indexing of nil value (Fixes #498) (by @fatalbanana)
  896. * Add stat_convert command to convert stats tokens from sqlite3 to redis
  897. * Implement redis advanced lua api with pipelining
  898. * Fix memory leak on redis stat (#500)
  899. * Fix user/language learn count in sqlite statistics (#496) (by @fatalbanana)
  900. * Fix build with custom pcre
  901. * Fix fuzzy relearning (#498)
  902. * Improve planning of asynchronous tasks
  903. * Show slow rules in log
  904. * Add warning for slow regexps
  905. * Add base32 decode/encode routines to lua util
  906. * Allow converting of learn cache from sqlite to redis
  907. * Add methods to check if a messages has from/rcpts
  908. * Improve and fix multimap plugin:
  909. - Restore 'header' maps
  910. - Add filters for headers
  911. - Add 'email:addr', 'email:user', 'email:domain' and 'email:name' filters
  912. - Add generic regexp filters
  913. * Disable reload command in rc scripts
  914. * Improve runtime CPU dispatcher for libcryptobox
  915. * Add preliminary support of digital signatures via ed25519
  916. * Add detection for RDRAND support
  917. * Print configuration of crypto on start
  918. * A in SPF presumes AAAA lookup as well
  919. 1.1.1:
  920. * Fix duplicated XBL symbol
  921. * Reduce log severity for ratelimit missing servers
  922. * Fix XBL composite to avoid duplicate symbols
  923. * Reduce weight of URL_ONLY rule due to FP rate
  924. * Disable fuzzy hashes from the metadata for now
  925. * Fix processing of empty messages (#486)
  926. * Always treat DNS timeouts as temporary fail for SPF
  927. * Fix issue with SPF double IP stack (#483)
  928. * Use X-Forwarded-For when checking secure_ip (#488)
  929. * Fix hash calculation for sqlite stats
  930. * Fix memory corruption on punycode
  931. * Fix strings allocation in punycode
  932. * Fix error message (#491)
  933. 1.1.0:
  934. * Incompatible change: sqlite3 and per_user behaviour:
  935. Now both redis and sqlite3 follows the common principles for per-user
  936. statistics:
  937. 1) If per-user statistics is enabled check per-user tokens ONLY
  938. 2) If per-user statistics is not enabled then check common tokens ONLY
  939. If you need old behaviour, then you'd need to use separate classifier
  940. for per-user statistics.
  941. * Implement redis statistics backend and cache
  942. * Implement autolearning for statistics
  943. * Reworked statistics architecture from scratch
  944. * Add hyperscan (https://github.com/01org/hyperscan) engine for regular
  945. expressions:
  946. - add lazy loader for hyperscan databases
  947. - rework regexp cache to have joint pcre/hyperscan scanning
  948. - implement hyperscan pre-filter support
  949. - add compilation guards for bad expressions
  950. - implement `rspamadm control recompile` command
  951. - implement hyperscan cache monitoring
  952. - slides: <https://highsecure.ru/rspamd-hyperscan.pdf>
  953. * Implement flexible task logging
  954. * Rework fuzzy worker:
  955. - it is now possible to run multiple fuzzy workers;
  956. - implement lazy writing as sqlite3 is bad at concurrent writing;
  957. - add retries for simple sql commands in fuzzy backend;
  958. - use fine-grained transactions for fuzzy;
  959. - implement new multi-pubkeys mode;
  960. - allow encrypted only storages;
  961. - rework statistics for fuzzy;
  962. - add `rspamadm control fuzzystat` command for extended statistics;
  963. - implement human readable output for the previous command;
  964. - add condition script for learning fuzzy storage;
  965. * Various fixes to SPF:
  966. - fix `redirect` records;
  967. - fix domains when parsing mx/ptr/a records in includes/redirects;
  968. - fix issues with multiple addresses in SPF records;
  969. - ignore SPF results in case of DNS failure;
  970. - adjust TTL of records when resolving subelements of SPF records;
  971. - always select `v=spf1` line if it is available
  972. - do not cache records with DNS failure in subrequests;
  973. - ignore records with temporary fails during subrequests resolving;
  974. - fix `RDNS_RC_NOREC` support;
  975. * Add clang plugin for static analysis:
  976. - implement static checks for `rspamd_printf` format strings;
  977. * Add 'allow_raw_input' option for non-mime messages
  978. * Recognize types using libmagic
  979. * Fix parsing of IPv6 received headers
  980. * Add new interface of communication between workers in rspamd
  981. * Add support for named socketpairs
  982. * Don't write URLs by default as it is too verbose
  983. * Set status for HTTP replies
  984. * Try load `rspamd.conf.override`
  985. * Implement words decaying for text parts to limit many checks
  986. * Improve support of SA rules and plugins:
  987. - add check_for_shifted_date and check_for_missing_to_header eval rules;
  988. - add 'check_relays_unparseable' support;
  989. - add `check_for_mime('mime_attachement')` function;
  990. - use new re_cache interface for all SA rules;
  991. - add support for `Mail::SpamAssassin::Plugin::MIMEHeader`;
  992. - add support of 'special' SA headers to `exists` function;
  993. - fix issue when SA metas contain other metas;
  994. - fix freemail rules;
  995. * Many fixes to the URL parser
  996. * Match any newline character in regexps
  997. * Fix resolving of upstreams and detection of poor IPv6 configurations
  998. * Parse upstreams selection algorithm from the configuration line
  999. * Add `reresolve` command to the control interface
  1000. * Generate fuzzy hashes from task metadata (URLs and headers)
  1001. * Add method to check if IP is local and `local_addrs` option
  1002. * Implement forced timeout for delayed filters
  1003. * Disable fast path of pcre-jit as it seems to be broken
  1004. * Bayes fixes:
  1005. - new normalizer function;
  1006. - really use weights of tokens from the OSB algorithm;
  1007. - restore multiple classifiers support;
  1008. * Rules changes:
  1009. - add `R_SUSPICIOUS_URL` rule that detects obfuscated URL's;
  1010. - improve empty image rule;
  1011. - rework `FORGED_RECIPIENTS` rule;
  1012. - reduce weight of `SUSPICIOUS_RECIPS`;
  1013. - fix `*_NORESOLVE_MX` symbols in hfilter;
  1014. - add `SUBJ_ALL_CAPS` rule with support of UTF8
  1015. - add spamhaus SBL to uribl
  1016. - fix `SUSPICIOUS_RECIPS` and `SORTED_RECIPS` rules
  1017. - remove `R_TO_SEEMS_AUTO` as it generates a lot of FP;
  1018. - add new Message-ID regexp for Thunderbird (by @moisseev);
  1019. * Plugins changes:
  1020. - allow ratelimit plugin to set symbol instead of pre-result
  1021. - support IP DNS black lists for URIBL (e.g spamhaus SBL);
  1022. - drop deprecated SURBL bits (by @fatalbanana)
  1023. - rename `JP_SURBL_MULTI` to `ABUSE_SURBL` (by @fatalbanana)
  1024. - add `SURBL_BLOCKED` (by @fatalbanana)
  1025. - add `CR_SURBL`
  1026. - SURBL: allow fallthrough to default symbol (by @fatalbanana)
  1027. - Settings: fix IP match (by @fatalbanana)
  1028. - SURBL: add missing symbols to metric (by @fatalbanana)
  1029. - allow processing images urls for SURBL
  1030. - unconditionally disable SPF for authenticated users and local networks
  1031. * Rework ratelimit plugin
  1032. - switch to `rates` instead of old and stupid strings to setup;
  1033. - check if a bucket is zero and disable the corresponding limits'
  1034. - turn off all buckets by default;
  1035. - check either `rcpt` or `user` buckets, not all together'
  1036. - document new `rates` and `symbol` options;
  1037. - inform user about what buckets are used in the configuration;
  1038. * Add neural network **experimental** plugin
  1039. * Add a sample script to learn neural network from rspamd logs
  1040. * Add documentation strings support to rspamd:
  1041. - add strings for the main configuration options;
  1042. - document workers options;
  1043. - add internal plugin options;
  1044. - create `rspamadm confighelp` routine;
  1045. - implement human readable output for the previous command;
  1046. - add subtree search support;
  1047. - add keyword search support;
  1048. * Documentation improvements, tutorials section, statistics description
  1049. * Many other minor and major bugfixes not noted here
  1050. 1.0.11:
  1051. * Fix spf redirects
  1052. * Fix domains when parsing mx/ptr/a records in includes/redirects
  1053. * Fix unfolded base64 encoding
  1054. * Fix GError use-after-free
  1055. * Do not rewrite the original url when using redirector
  1056. * Fix parsing of fragment in urls
  1057. * Fix processing of HTML tags
  1058. * Improve empty image rule
  1059. * Avoid long double type
  1060. * Fix tokens weights in OSB algorithm
  1061. * Improve debugging for bayes
  1062. 1.0.10:
  1063. * Fix settings application (#416)
  1064. * Fix another issue with fixed strings
  1065. * Fix hash function invocation
  1066. * Use the proper string for make_dns_request in lua_http
  1067. * Fix scan time output
  1068. * Update webui:
  1069. - fix labels for greylisting
  1070. - fix dimension of scan time
  1071. 1.0.9:
  1072. * Emergency fix in keyed blake2 to fix fuzzy hashes and encrypted password
  1073. * Support passwords longer than 64 symbols
  1074. 1.0.8:
  1075. * Add function to traverse AST atoms
  1076. * Allow dependencies on rspamd symbols for SA metas
  1077. * Fix memory corruption when timeout is removed in fuzzy check
  1078. * Fix encrypted fuzzy add processing
  1079. * Avoid use-after-free in controller session destructor
  1080. * Use session pool instead of task pool in fuzzy check
  1081. * Fix assembly in i386 mode (#413, #412)
  1082. 1.0.7:
  1083. * Plugged memory leaks in internet address object & html parser
  1084. * Fixed static build
  1085. * Fixed multiple sigchld processing
  1086. * Fixed deletion of signal events after event processing loop
  1087. * Fixed build on ARM (#404 - reported by @Gottox)
  1088. * Fixed setting the default mask for SPF.
  1089. * Fixed sanitisation of HTTP query values
  1090. * Fixed parsing of the last header in encrypted HTTP messages
  1091. * Additions and fixes for test suite & benchmarks
  1092. * Added openssl aes-256-gcm support to libcryptobox & HTTP server
  1093. * Implemented support for starting multiple HTTP servers
  1094. * Implemented batch accept in HTTP server
  1095. * Added module to get data from HTTP headers (#285 - reported by @msimerson)
  1096. * Added `rspamadm control` command
  1097. * Added ability to sort counters output.
  1098. * Added ability to specify custom headers for rspamc client
  1099. * Fix architecture detection
  1100. * Converted history storage to the UCL format
  1101. * Allow flexible number of rows in history
  1102. * Fix action badges in WebUI
  1103. * Add universal cryptobox hash API
  1104. * Migrated to the optimized blake2b implementation adopted from Andrew Moon
  1105. * Allow explicit loading of specific modules
  1106. * Always load settings module
  1107. * Allow to add symbols from settings
  1108. * Fix double free in the controller fuzzy learn command
  1109. * Avoid endless loop when cannot open sqlite db
  1110. * Updated libucl
  1111. 1.0.6:
  1112. * Fix build on i386
  1113. * Update CentOS7 service file patch (by @fatalbanana)
  1114. * Fix path to rspamadm in Debian init script (by @fatalbanana)
  1115. * Fix broken '_SC_GETPW_R_SIZE_MAX' on FreeBSD
  1116. * Fix portability issues
  1117. * Use cryptobox chacha for libottery
  1118. * Better support of 32 bit builds
  1119. * Fix header name tokens setup
  1120. * Fix levenstein distance method for words
  1121. * Add workaround for old libevent (#400)
  1122. * Fix microseconds in termination timer
  1123. * Fix some more issues with fixed strings
  1124. * Explicitly test CPU instructions even after CPUID call
  1125. * Do not check out of boundary memory
  1126. * Do not output broken emails
  1127. * Fix unknown symbols registration
  1128. * Handle SIGILL using longjmp
  1129. * Block signals when exiting event loop
  1130. * Fix incorrect allocation size
  1131. * Slightly optimize alignment
  1132. * Restore rspamd -t for compatibility
  1133. * Add more sanity checks for emails
  1134. 1.0.5:
  1135. * Add rspamd control interface:
  1136. - support `stat` command to get runtime stats of rspamd workers
  1137. - support `reload` command to reload runtime elements (e.g. sqlite3 databases)
  1138. * Rework curve25519 library for modular design:
  1139. - add Sandy2x implementation by Tung Chou
  1140. - fix CPU detection for variables loading assembly
  1141. - add testing for curve25519 ECDH
  1142. * New fixed strings library
  1143. * Add `R_SUSPICIOUS_IMAGES` rule
  1144. * Enable mmap in sqlite3
  1145. * Use new strings in the HTTP code
  1146. * Improve google perftools invocation
  1147. * Improve performance profiling in http test
  1148. * Reorganize includes to reduce namespace pollution
  1149. * Allow specific sections printing in configdump command
  1150. * Rework workers signals handlers to be chained if needed
  1151. * Update socketpair utility function
  1152. * Add control_path option for rspamd control protocol
  1153. * Fix ownership when listening on UNIX sockets
  1154. * Rework signals processing in main
  1155. * Remove extra tools from rspamd (they live in rspamadm now)
  1156. * Remove global rspamd_main
  1157. * Add global timeout for the overall task processing (8 seconds by default)
  1158. * Sanitize NULL values for fuzzy backend
  1159. * Store NM between encrypt/decrypt
  1160. * Add textpart:get_words_count method
  1161. * Fix generic DNS request in lua
  1162. * Tune hfilter weights
  1163. * Add support of IPv6 in hfilter
  1164. * Fix parsing of HTTP headers with IP addresses
  1165. * Sync with the recent libucl
  1166. * Various minor bugfixes
  1167. 1.0.4:
  1168. * Add configdump routine to rspamadm
  1169. * Implement retransmits for fuzzy_check plugin
  1170. * Fix events processing for learning anf checking fuzzy hashes
  1171. * Avoid dependency on unneeded and uncompatible glib include
  1172. * Add `historyreset` command to the controller
  1173. * Fix loading of tokenizer config from dump (#389)
  1174. * Add sorting hints for the history
  1175. * Allow custom lua scripts for users/languages extraction (#388)
  1176. * Do not add FORGED_RECIPIENTS when 'To' is missing (#387)
  1177. * Do not add R_UNDISC_RCPT when 'To' is missing (#387)
  1178. * Add encryption to fuzzy check plugin
  1179. * Add encryption for fuzzy storage
  1180. * Add new epoch for encrypted fuzzy request
  1181. * Add encryption for `rspamd.com` storage
  1182. * Remove gmime processing for LDA mode as it is deadly broken
  1183. * Add routine to find end of headers position in mime messages
  1184. * Fix LDA headers folding
  1185. * Init libraries in rspamc client as well to avoid locale issues
  1186. * Avoid collision with locally installed includes
  1187. * Allocate and free memory with the same allocator in rspamadm (#385)
  1188. * Preserve expired fuzzy hashes counter
  1189. * Improvements in webui:
  1190. - Add favicon.ico
  1191. - Rework history table
  1192. - Fix sorting for the history
  1193. - Migrate to bootstrap 3 and jquery 2
  1194. - Fix css bugs
  1195. - Add glyphicons
  1196. - Add reset history
  1197. - Improve history buttons
  1198. - Redraw graph to avoid display issues
  1199. - Webui is now MIT licensed to match licensing policy of rspamd
  1200. 1.0.3:
  1201. * Fix piechart clean slice (#380)
  1202. * Fix controller crashes when GString is reallocated (#381)
  1203. * Correctly set locale before start
  1204. * Set C locale for numeric values
  1205. * Add rspamadm routine:
  1206. - add `pw` command to manage passwords
  1207. - add `help` command for displaying help
  1208. - add `configtest` command to check configuration files
  1209. - add `keypair` command for generating encryption keys
  1210. - add `fuzzy_merge` routine to merge fuzzy sqlite databases
  1211. - add a simple manual page for rspamadm
  1212. * Allow metric registration for composite expressions
  1213. * Add strict mode for configtest
  1214. * Add logger counters
  1215. * Save and show learned messages count (#383)
  1216. * Add `no_stat` flag
  1217. * Add `task:set_flag` and `task:get_flags` (#382)
  1218. * Enable foreign keys in sqlite3
  1219. * Remove orphaned shingles from fuzzy storage
  1220. * Optimize synchronization steps for fuzzy storage
  1221. * Allow delayed conditions registration
  1222. * Add lua API for conditions registering
  1223. 1.0.2:
  1224. * Fix critical bug in webui that prevents password from being sent
  1225. * Rework webui view:
  1226. - Switch to d3.js for graphs
  1227. - Improve piechart look
  1228. - Rework colors for piechart
  1229. - Fix layout for symbols
  1230. - Fix refresh button
  1231. * Add descriptions for whitelist maps
  1232. * Fix build on arm (#379)
  1233. * Fix issue with the last element in the radix trie
  1234. * Add more tests for radix trie algorithm
  1235. * Allow to extract URLs from query strings of other URLs (#361)
  1236. * Initialize rrd fields before writing to file
  1237. * Fix double free if no password has been specified
  1238. 1.0.1:
  1239. * Add writing to rrd from the controller
  1240. * Fixed lots of bugs in rrd code
  1241. * Adopt new DNS API in hfilter plugin (by @AlexeySa)
  1242. * Allow only one controller process to manage rrd file
  1243. * Set event base for fuzzy calls
  1244. * Improve fuzzy IO errors logging
  1245. * Add rra extraction function to rrd library
  1246. * Add graph handler to the controller
  1247. * Cache correct passwords to avoid too high CPU usage when working with webui
  1248. * Controller sockets are owned by router do not export them to task
  1249. * Optimize logging by skipping hash table search if it's empty
  1250. * Fix loading issue whith broken statfiles
  1251. * Print assertions from glib to rspamd logger
  1252. * Load legacy `lua/rspamd.local.lua`
  1253. * Update webui with some fixes to learning and scanning
  1254. 1.0.0:
  1255. * Rework symbols processing:
  1256. - Improve sorting logic for symbols
  1257. - Organize processing into multiple stages
  1258. - Added asynchronous watchers for symbols
  1259. - Added ability to organize dependencies between symbols
  1260. * Fixed URL redirector:
  1261. - Use optimized POE loop
  1262. - Organize dependencies
  1263. - Fix startup
  1264. * New sqlite3 backend:
  1265. - Allow to have per-languages and per-user statistics
  1266. - Allow sqlite3 to be used as statistics backend
  1267. * Store tokenizer configuration within statfiles
  1268. * Improve bayes statistics:
  1269. - Use headers and images metainformation in bayes
  1270. - Suggest using of pre-processed tokens for statistics
  1271. - Fix tokens normalization for OSB algorithm
  1272. * Rewrite url parsing:
  1273. - Fix numerous issues with url extraction and normalization
  1274. - Fix mailto urls
  1275. * Fix settings plugin to allow custom actions scores
  1276. * Improve rbl plugin
  1277. * Allow capturing patterns in rspamd lua regexp library
  1278. * Add GTUBE support
  1279. * Fix spamc legacy support
  1280. * Add DKIM support to RBL module
  1281. * Fix issues with multiple DKIM signatures
  1282. * Fix issue if rspamd cannot create statfiles (#331)
  1283. * Rework parts and task structure:
  1284. - Now text_parts, parts and received are arrays
  1285. - Pre-allocate arrays with some reasonable defaults
  1286. - Use arrays instead of lists in plugins and checks
  1287. - Remove unused fields from task structure
  1288. - Rework mime_foreach callback function
  1289. - Remove deprecated scan_milliseconds field
  1290. * Add ip_score plugin support (not enabled by default):
  1291. - Can check for asn/country and network using DNS lookups
  1292. - Can store and load reputation from redis server
  1293. * Improve PARTS_DIFFER rule to count merely different words
  1294. * New HTML parser:
  1295. - Parses HTML parts using a set of state machines
  1296. - Extracts useful data and exports it to lua functions:
  1297. + Styles
  1298. + Images
  1299. + URLs
  1300. + Colors
  1301. + Structure elements
  1302. - Added HTML rules for some checks
  1303. * New version of LUA DNS API
  1304. * Table versions of many functions in LUA API
  1305. * Improve rspamc client:
  1306. - Print execution time
  1307. - Allow executing of external commands and passing output to them
  1308. - Allow mime output mode when rspamc alters message according to rspamd
  1309. checks and send it to an external command or stdout
  1310. * Allow scanning of local files using HTTP requests
  1311. * Rework configuration system:
  1312. - Rules are now moved from the $CONFDIR to $RULESDIR to avoid ambiguity
  1313. - All modules configurations are now split in $CONFDIR/modules.d/* to
  1314. simplify upgrades
  1315. - Move hfilter to plugins
  1316. - Allow plugins and rules to define default scores to simplify metrics
  1317. setup
  1318. - Include overrides for all modules to honor local/automatic parameters
  1319. - Tune scores for many modules
  1320. * Rework and enable DMARC plugin
  1321. * Add whitelist plugin for SPF/DKIM/DMARC based whitelisting
  1322. * Add some common domains to whitelists shipped with rspamd
  1323. * Rework logging:
  1324. - Now each log entry supports module name and a `tag`. Tag is used to
  1325. identify unique objects (such as tasks) when checking log files
  1326. - It is possible to turn on debugging for the specific modules
  1327. - Systemd logging is fixed
  1328. * Improve spamassassin plugin.
  1329. - Now headers are matched more like SA
  1330. - Improve support of Message-ID
  1331. - Add support of ToCc header type
  1332. - Fix :addr and :name in headers regexps
  1333. * Resurrect rrd support code
  1334. * Save controller stats between restarts
  1335. * Fixed tonns of bugs
  1336. * Added tonns of minor improvements and features
  1337. * Added more unit tests
  1338. * Create functional tests framework
  1339. * Added documentation for missing modules
  1340. * Added rpm/deb repositories and scripts
  1341. * Updated WebUI and libucl externals
  1342. 0.9.10:
  1343. * Do not dereference null pointer on learning.
  1344. * Fix some extreme cases in BAYES.
  1345. * Add a workaround to avoid bad HTML messages breaking.
  1346. * Build with -O2 flags by default.
  1347. * Add constraints to limit DNS requests count per task.
  1348. * Add workaround for SURBL DNS flood.
  1349. * Set error if rspamd cannot learn anything.
  1350. 0.9.9:
  1351. * Don't use RWL_SPAMHAUS_WL (unknown result) for whitelisting (by @fatalbanana)
  1352. * Import updated public suffix list (by @fatalbanana)
  1353. * Remove debug message
  1354. * Fix settings (by @fatalbanana)
  1355. * Remove duplicated symbol registration
  1356. * Use WAL for fuzzy storage
  1357. * RBL fixes (by @fatalbanana):
  1358. - silence errors;
  1359. - yield unknown results from RBLs;
  1360. - fix scoring for DNSWL;
  1361. - fix use of RBL name as symbol;
  1362. - ignore RBL names that would not be yielded;
  1363. * Support captures in regular expressions
  1364. * Add captures support to lua_regexp
  1365. * Support dist on FreeBSD and Darwin
  1366. * Add RCVD_IN_DNSWL_NONE as whitelisting exclusion (by @fatalbanana)
  1367. * Multiple fixes to URL detection:
  1368. - support port definition;
  1369. - fix query and path recognition;
  1370. - fix parsing of multiple slashes in URL;
  1371. - fix parsing query just after port;
  1372. - fix path field in `url:to_table` method;
  1373. - improve support of IP based URLs.
  1374. * Set ignore_whitelists = true for RECEIVED_SPAMHAUS_XBL (by @fatalbanana)
  1375. * Add GTUBE support
  1376. * Ignore User header in SA mode
  1377. 0.9.8:
  1378. * Fix critical bug in bayes classifier (#305)
  1379. * Fix critical bug in RBL module (by @fatalbanana)
  1380. * Fix and rework settings plugin.
  1381. * Fix get_all_opts for a case of non-iterable options.
  1382. * Use tld for redirector's matching.
  1383. 0.9.7:
  1384. * Add whitelist_exception setting to RBL module (by @fatalbanana)
  1385. * Don't use RWL_MAILSPIKE_POSSIBLE or DNSWL_BLOCKED for whitelisting (by
  1386. @fatalbanana)
  1387. * Fix extreme cases in bayes classifier.
  1388. * Fix parsing of urls with '?' at the end of hostname.
  1389. * Update interface.
  1390. * Fix number of issues with webui interaction.
  1391. * Fix saving maps.
  1392. * Allow user@ and @domain matches in multimap.
  1393. * Fix issues with bounces From processing.
  1394. * Fix abs/fabs misuse.
  1395. * Fix builds on suse and arch linux distributions.
  1396. 0.9.6:
  1397. * Fix memory leak if mime cannot be parsed.
  1398. * Fix dkim cache expiration.
  1399. * Fix issues with redirector HTTP response.
  1400. * Fix abnormal connection closing with certains messages with a high score
  1401. (issue #296)
  1402. * Fix redirector installation.
  1403. * Use specific POE loop for some systems.
  1404. * Fix number of issues in URL redirector.
  1405. * Fix selecting URLs for sending to redirector.
  1406. 0.9.5:
  1407. * Avoid double free when extending HTTP message.
  1408. * Fix double free if multiple classifiers are defined.
  1409. * Fix misprint in spamassassin plugin.
  1410. * Fix cpuid invocation on i386.
  1411. * Fix ownership issues for zero-copy decode.
  1412. * Allow __len metamethod on rspamd{text}.
  1413. * Add base64 decoding lua utility.
  1414. * Fix build on FreeBSD
  1415. * Skip spaces at the beginning of mime messages.
  1416. * DBL_ABUSE_REDIR should not have significant weight.
  1417. * Allow to split by lua_regexp rspamd{text} objects.
  1418. * Allow to specify custom stop pattern for lua_tcp.
  1419. 0.9.4:
  1420. * Fix critical bugs in tokenization algorithm
  1421. * Write unit tests for tokenization
  1422. * Add documentation for lua_tcp
  1423. * Switch off legacy tokenization by default.
  1424. * Fix critical bugs in words normalization
  1425. * Add lua bindings to tokenizer.
  1426. * Implement storing of HTTP headers inside task
  1427. * Add lua API to accerss HTTP headers data
  1428. * Implemented base64 encoding suitable for MIME
  1429. * Use caseless hash and equal functions for HTTP request headers.
  1430. * Improve debian architectures support (by @dottedmag)
  1431. 0.9.3:
  1432. * Revert incorrect regexp change that broke the default rules
  1433. * Fix lua_tcp module
  1434. 0.9.2:
  1435. * Fix error on spawning unique workers.
  1436. * Add preliminary version of generic LUA TCP requests API.
  1437. * Use lua 5.1 if luajit is not available (Arm64, PowerPC, s390x etc)
  1438. * Fix fuzzy mime strings with only type.
  1439. * Improve thunderbird sanity checks.
  1440. * Fix critical bug on matching regular expressions.
  1441. * Make hiredis optional dependency.
  1442. * Fix multiple bugs in daemon reloading
  1443. 0.9.1:
  1444. * Restore utf8 validation for regular expressions to avoid crashes
  1445. * Fix symbols displaying in the interface
  1446. * Add symbol groups to the interface
  1447. * Fix maps ID parsing in the controller
  1448. * Add multimap and regexp modules documentation
  1449. * Backport fixes from libucl
  1450. * Fix debian package (by @dottedmag)
  1451. * Rework XXH32 invocations
  1452. 0.9.0:
  1453. * Add support of the fast and secure protocol level encryption:
  1454. - curve25519 is used for key exchange;
  1455. - chacha20/poly1305 cryptobox construction for bulk encryption;
  1456. - zero latency overhead;
  1457. - encrypting and balancing HTTP proxy worker
  1458. * Rework expressions and create new expressions library:
  1459. - aggressive optimizations based on the abstract syntax tree;
  1460. - abstract expressions support (regular expressions, functions, lua modules
  1461. composites and so on)
  1462. - New comparision and '+' operators support
  1463. - New greedy algorithm to minimize execution time of expressions and
  1464. all symbols
  1465. - Dynamic expressions benchmark and reoptimizations
  1466. * Many improvements to the LUA API:
  1467. - reworked logger module allowing to do pretty print of the most of lua
  1468. types (including tables and userdata classes)
  1469. - reworked lua redis and lua HTTP to support more features
  1470. - added opaque type for passing large text chunks without copying
  1471. - new regexp module with many auxiliary functions (e.g. `re:split`)
  1472. * LuaJIT is now the default requirement for rspamd allowing to speed up lua
  1473. execution by a large margin (however, plain lua is still supported)
  1474. * New plugins:
  1475. - spamassassin rules plugin that allows to load and re-use the most of
  1476. SA rules natively
  1477. - DMARC plugin that evaluates SPF and DKIM policies to the domain policies
  1478. - many old plugins has been reworked to implement new features and improve
  1479. stability
  1480. * New aho-corasic trie implementation from @mischasan that allows to load and
  1481. use hundreds of thousands of patterns with no influence on load
  1482. * Support of PCRE JIT and PCRE JIT fast path modes that significantly improves
  1483. the performance of regular expressions if supported by PCRE
  1484. * New URLs parser and extractor:
  1485. - removed legacy code that was useless for url finding
  1486. - reworked algorithms of URL parsing for more precise and accurate results
  1487. - added top-level-domains tree from http://publicsuffix.org
  1488. - improved emails parsing
  1489. - removed many phishing false positives due to TLD tree check
  1490. * New statistics infrastructure:
  1491. - created a separate layer of statistic library
  1492. - improved OSB-Bayes by re-weighting tokens according to the original
  1493. academic paper and `crm114` implementation, which reduced false positives
  1494. rate significantly
  1495. - created learn cache to avoid double learning of statistics and providing
  1496. an efficient way to re-learn class for a message
  1497. - created abstract layers for different statistics backends
  1498. - implemented new tokenization algorithms with fast or secure (siphash)
  1499. hashes to generate statistics features
  1500. * Reworked utf8 tokenization that previously corrupted all UTF8 words (minor
  1501. incompatibility with old fuzzy hashes with utf-8 symbols)
  1502. * SPF module has been completely rewritten to support complex cases of
  1503. `include` and `redirect` within SPF records
  1504. * DKIM module now supports multiple signatures
  1505. * Controller passwords can now be stored encrypted by `PBKDF2-HMAC` in the
  1506. configuration file
  1507. * Many hand-written HTTP clients has been replaced with the common rspamd
  1508. http module
  1509. * New test framework:
  1510. - import lua `telescope` test framework
  1511. - add unit tests for many rspamd modules and routines
  1512. - create a unit test for each possible bug found
  1513. - use luajit ffi for testing C code
  1514. - added preliminary support of functional testing by creating tasks from lua
  1515. * Randomize hash seed to avoid certain hash tables vulnerabilities
  1516. * Documentation improvements:
  1517. - added documentation for the vast majority of rspamd modules
  1518. - added documentation for rspamd protocol
  1519. - added documentation for the most of rspamd LUA extensions
  1520. * Fixed tonns of bugs and memory leaks
  1521. * Added tonns of minor features
  1522. 0.8.3:
  1523. * Various critical fixes in distribution (by @dottedmag and @fatalbanana)
  1524. * Fixed bugs in url detector to parse certain patterns
  1525. * Add default host and helo for a client
  1526. * Some sanity checks for tokenizer and classifier
  1527. * Reiterate on systemd support
  1528. * Fix missing symbol registration
  1529. * Add support of spamc compatible output
  1530. * Filter double-dots in rbl.lua validate_dns (by @fatalbanana)
  1531. * Update ucl submodule due to critical bugfix
  1532. 0.8.2:
  1533. * Create fuzzy db if it does not exist
  1534. * Fix: Centos init script: configtest() (by @AlexeySa)
  1535. * Enable one_shot for RECEIVED_SPAMHAUS_XBL - Fixes #102 (by @fatalbanana)
  1536. * Update Exim patch (by @fatalbanana)
  1537. * Fix processing of unix sockets.
  1538. * Allow applying settings to authenticated users (by @fatalbanana)
  1539. * Make settings priorities work as documented (by @fatalbanana)
  1540. * Fix race condition in symbols planner
  1541. * Add DNSWL_BLOCKED symbol (by @fatalbanana)
  1542. * Make Exim pass usernames to rspamd (by @fatalbanana)
  1543. * Update RBL module (by @fatalbanana):
  1544. - fix indentation;
  1545. - collapse loops;
  1546. - avoid calling for un-needed information;
  1547. - allow disabling RBLs for authenticated users
  1548. * once_received.lua: Fix indentation & add exclusion for authenticated users (by @fatalbanana)
  1549. * hfilter.lua: Add exclusion for authenticated users (by @AlexeySa)
  1550. * Updates to hfilter rules (by @AlexeySa)
  1551. * Set empty <> user or addr for msgs without FROM (by @eneq123)
  1552. * Fix: attempt to index field '?' (a nil value) (by @eneq123)
  1553. * Fix: if not exist Date-header (by @AlexeySa)
  1554. * Add task:get_content() method.
  1555. * rbl.lua: Ignore private IP space (by @fatalbanana)
  1556. * Allow to check radix maps from lua by rspamd{ip}
  1557. * Make local exclusions configurable per-RBL (by @fatalbanana)
  1558. * Add rspamd_config:radix_from_config() (by @fatalbanana)
  1559. * Support emails dnsbl in rbl (by @fatalbanana)
  1560. * Complete rework of url extraction logic
  1561. * Allow customizations for unix sockets. (fixes #182)
  1562. * Set lua path according to rspamd settings.
  1563. * Import lua-functional for plugins stuff.
  1564. * Completely rewrite multimap plugin in functional style.
  1565. * Fix FORGED_MUA_THUNDERBIRD_MSGID (fixes #186)
  1566. * Check IPv6 addresses at dnswl.org and Spamhaus whitelist (by @fatalbanana)
  1567. * Add lowercase utility for utf8 strings.
  1568. * Various fixes to build system
  1569. * Updated debian configuration infrastructure (by @dottedmag)
  1570. 0.8.1:
  1571. * Add sqlite and perl as dependencies for RPM/Debian packages (by @fatalbanana)
  1572. * Remove whitelist.lua from RPM file list (by @fatalbanana)
  1573. * Make Exim pass hostnames to rspamd (by @fatalbanana)
  1574. * Fix building on Fedora (by @fatalbanana)
  1575. * Add toggle for disabling installation of systemd units on Linux (by @fatalbanana)
  1576. * Fix double format rounding that caused output corruption (reported by @fatalbanana)
  1577. * Revert broken change for destructors ordering that led to memory corruption
  1578. * Do not reset symbols case of settings if parsed from lua (reported by @andrejzverev)
  1579. * Fix build on SunOS (by @wiedi)
  1580. * Fix multiple crashes on broken DKIM DNS records
  1581. * Fix critical issue with composites weights removing
  1582. * Fix memory corruption in composites processing code
  1583. * Ignore non-SPF TXT records when parsing SPF includes
  1584. 0.8.0:
  1585. * New fuzzy check logic:
  1586. - use shingles algorithm for fuzzy matching
  1587. - use blake2 instead of md5 for larger output space
  1588. - combine fuzzy and strict matching
  1589. - allow to organize private storages by means of keys
  1590. - preserve compatibility with previous versions
  1591. * New fuzzy storage:
  1592. - use sqlite instead of own memory based hash tables
  1593. - rework commands interface
  1594. - add conversion from the old format
  1595. - add fuzzy match by shignles
  1596. - support old rspamd versions
  1597. * Add lemmatizing for words used in fuzzy hashes that allows to improve match
  1598. quality by using of the first forms of all words
  1599. * Rework language detection
  1600. * Fix several critical bugs, memory leaks and deadlocks:
  1601. - memory leak in HTML nodes parsing
  1602. - deadlock in logger code
  1603. - deadlock in signals processing
  1604. - crashes in fuzzy_storage
  1605. - crashes in tokenizers if the input was empty
  1606. * Import new libucl with several bugfixes and improvements
  1607. * Support listening on ipv6 addresses only
  1608. * Fix macro expansion in SPF module
  1609. * Several bugfixes in DKIM module
  1610. * Add load headers support for mime parts to the lua API
  1611. * Add documentation for:
  1612. - workers in general
  1613. - fuzzy_storage worker
  1614. - fuzzy_check plugin
  1615. - mimepart and textpart lua API modules
  1616. 0.7.6:
  1617. * Apply boundary fix for dkim simple canonization
  1618. * Fix ping command
  1619. * Return nil if header was not found in lua_task
  1620. * Fix hang in upstreams revive logic
  1621. * Decode entitles when normalizing HTML parts
  1622. * Fix logic of finding URLs in HTML parts
  1623. * Do not include \0 into length of text when performing conversion to utf8
  1624. * Fix raw vs parsed reperesentations
  1625. Raw parts are now:
  1626. - decoded b64/qp, but *NOT* converted to utf-8
  1627. Processed parts are now:
  1628. - converted to UTF-8
  1629. - normalized if needed (e.g. HTML tags are stripped)
  1630. * Rework DKIM canonization to line based
  1631. * Fix fuzzy hashes addding
  1632. * Use more specific hash function for fuzzy
  1633. * Fix leaking of iconv descriptors
  1634. * Fix PTR resolving in lua resolver
  1635. * Rework spf module.
  1636. - Copy data to memory pool as cached record might be destroyed causing
  1637. freed memory being passed to the protocol output (use after free)
  1638. - Allow SPF_NEUTRAL policy to be handled separately
  1639. - Add R_SPF_NEUTRAL to the default config
  1640. * Rework `register_symbols` function
  1641. * Allow to disable components of hfilter
  1642. 0.7.5:
  1643. * Fix owner when creating folder /run/rspamd (by @sfirmery)
  1644. * Fix IP validity checks
  1645. * Decode URLs obtained from HTML tags
  1646. * Fix crash with unweighted upstreams
  1647. * Stop processing headers in parts
  1648. * Set sockaddr.sa_family properly when connectig to upstreams
  1649. * Fix reload issues in surbl and fuzzy_check (reported by @citrin)
  1650. * Fix timeouts in redirector
  1651. * Improve lua errors reporting
  1652. * Fix lua closures processing in libucl
  1653. * Rework calling of lua functions from regexp module
  1654. * Choose raw regexp for raw headers
  1655. * Rework conversion to utf since glib one is broken
  1656. * Ignore SGML style tags in html
  1657. * Fix old bug with non-capturing https urls
  1658. * Fix memory corruption on fuzzy reload (reported by @citrin)
  1659. * Fix percents display in rspamc
  1660. * Fix buffer update for DKIM
  1661. * Do not validate utf for raw headers
  1662. 0.7.4:
  1663. * Fix build under *BSD
  1664. * Detect HAN unicode script
  1665. * Implement language detection heuristic for text parts
  1666. * Fix time output in history
  1667. * Improve piechart coloring
  1668. * Fix \r\n conversion in DKIM module (reported by @citrin)
  1669. * Try to detect systems with no IPv6 support
  1670. * Fix multiple/single values in use settings (reported by @citrin)
  1671. * Rework IP addresses in upstreams:
  1672. - Select ipv4/unix addresses if they exist and use ipv6 for ipv6 only
  1673. upstreams (since the support of ipv6 is poor in many OSes and
  1674. environments)
  1675. - Free IP list on upstream destruction
  1676. - Add test cases for addresses selection
  1677. - Allow adding of free form IP addresses to upstreams
  1678. * Fix endiannes in lua_radix search (reported by @citrin)
  1679. * Soft shutdown should also set wanna_die flag (reported by @citrin)
  1680. * Stop use-after-free in event loop termination
  1681. * Fix processing of very short messages in DKIM (reported by @citrin)
  1682. * Detect systems without shared mutexes
  1683. * Fix issues with PTR and MX elements in SPF parser (reported by @citrin)
  1684. 0.7.3:
  1685. * New upstreams code:
  1686. - simplify upstreams API;
  1687. - unify strings parsing in upstreams definition;
  1688. - add configuration options for the upstreams;
  1689. - for failed upstreams re-resolve their addresses;
  1690. - use all resolved addresses for an upstream (round-robin);
  1691. - implement stable hashing and use it by default for upstreams;
  1692. - add unit test for upstreams module.
  1693. * Rework signals processing in all rspamd workers:
  1694. - signals are now processed in the event loop;
  1695. - implement the most common signal handlers for all workers;
  1696. - add callbacks for workers specific signal handlers
  1697. * Fix critical issue with fuzzy storage:
  1698. Fuzzy stroage could not save any hashes on termination due to bugged
  1699. signals handling
  1700. * Fix roll history IP storage
  1701. * Rework ipv4/ipv6 handling in parsing addresses:
  1702. - turn off support of IPV6_V6ONLY socket option;
  1703. - create ipv6 socket prior to ipv4 one to handle systems with v6/v4
  1704. sockets enabled (Linux)
  1705. * Remove CBL as it's wholly included in Spamhaus XBL (by @fatalbanana)
  1706. * Remove nszones.com fake RBL (by @citrin)
  1707. * Fix upstreams interaction for fuzzy_check
  1708. * Verify spf PTR records (reported by @citrin)
  1709. * Fix spf MX records parsing
  1710. * Add compatibility for old libevent (by @yellowman)
  1711. * Sync bugfixes from libucl
  1712. 0.7.2:
  1713. * Convert all maps to the compressed radix trie
  1714. * Allow IPv6 addresses in IP maps
  1715. * Remove dynamic items support from symbols cache
  1716. * Allow hex encoded output of strings
  1717. * Fix bug with control connections count
  1718. * Process fuzzy weight correctly (reported by @fatalbanana)
  1719. * Remove extra reference retain of http connection on error
  1720. * Remove deprecated options from the default config
  1721. * Add `one_shot` attr to metric's symbols
  1722. * Doc: add documentation for metrics
  1723. * Add Upstart job to debian packaging (by @CameronNemo)
  1724. * Config: improve SURBL symbols descriptions (by @citrin)
  1725. * Config: reflect SURBL changes (by @citrin):
  1726. - Outblaze removed, malware moved to separate list:
  1727. http://www.surbl.org/news/internal/MW-malware-sublist-added-to-multi
  1728. * Fix C modules initialization on restart
  1729. * Treat single IP as a single IP in radix lists (reported by @citrin)
  1730. * Do not touch file and core limits if not asked explicitly (reported by @citrin)
  1731. * Improve logging for fuzzy errors
  1732. * Block SIGPIPE for HTTP writing
  1733. * Doc: update manual pages
  1734. * Fix HTTP connection termination
  1735. * Reduce default number of parallel requests to 8
  1736. * Sync with libucl include features
  1737. 0.7.1:
  1738. * Fix typo in stat output.
  1739. * Fix issues with includes crossing with the system includes
  1740. * Restore testing framework
  1741. * Add radix trie test suite
  1742. * Implement new path-compressed radix trie.
  1743. - The performance benefit over the old algorithm is about 1.5 times.
  1744. - Memory usage is significantly lower as well.
  1745. - Now radix trie can accept any IPv4/IPv6 values
  1746. * Various improvements to the memory pools code
  1747. * Fix writing reply to a client when no filters are defined
  1748. * Write base32 encoded fuzzy
  1749. * Fix 'soft reject' action
  1750. * Fix rspamd reload and modules reconfiguration
  1751. * Fix subject rewriting for the default subject
  1752. * Fix states for processing task and pre-filters
  1753. * Fix issues with connection closing
  1754. * Fix crashes in rdns
  1755. * Fix ratelimit pre-filter
  1756. * Update exim patch.
  1757. - Update to the recent exim version
  1758. - Strip extra leading src/ from the patch
  1759. - Remove sendfile since it was broken
  1760. - Fix rspamd spam report for exim
  1761. * Improve documentation
  1762. 0.7.0:
  1763. * Use HTTP protocol for all operatiosn
  1764. * Webui worker is now removed and controller works as webui
  1765. * Allow to serve static files via controller by option `static_dir`
  1766. * Rspamd interface is now a part of rspamd
  1767. * Rspamc client has been rewritten to use HTTP and non-blocking mode
  1768. allowing to start multiple operations simultaneously (see `-n` option)
  1769. * Lua API was completely reworked to satisfy modern standards of LUA:
  1770. * Module `lua-message` was removed
  1771. * Reduced number of superglobals registered by rspamd
  1772. * Many functions has been redesigned
  1773. * Symbols registration is now more convenient
  1774. * Users settings has been rewritten as lua plugin
  1775. * Reworked headers system as gmime's based one misses many headers and is
  1776. very slow to get headers values
  1777. * Reorganized code and removed embedded jannsson by using UCL for all json
  1778. parsing
  1779. * Migrated to `librdns` for DNS resolving that improves concurrency for
  1780. DNS requests significantly
  1781. * Fixed tonns of bugs in MIME processing
  1782. * Improved metrcis and default symbol's weights
  1783. * Added new RBL's
  1784. * Fixed a number of issues in the modules
  1785. * Removed several memory leaks found
  1786. * Fix unicode processing
  1787. * Fix fuzzy checking for unicode parts
  1788. * Significantly improve documentation and especially LUA API docs
  1789. * See migration notes at https://rspamd.com/doc/migration.html
  1790. 0.6.8:
  1791. * Controller now listen for localhost and not for 127.0.0.1 by default
  1792. * Allow FCrDNS-style RBL lookups (by @fatalbanana)
  1793. * Reduce threshold for parts_differ function.
  1794. * Fix hostname lookup for rdns rbl (by @AlexeySa)
  1795. * Fix HFILTER_URL_ONELINE to reduce false positive rate.
  1796. * Fix whitelist module.
  1797. * Allow override system predefined settings without touching system ones
  1798. by .try_include macro (by @andrejzverev)
  1799. * Check for [ip.address]-style HELO and suppress lookups. (by
  1800. @fatalbanana)
  1801. * Optimize hfilter (by @AlexeySa)
  1802. * Fix issue with random numbers generator in dns.
  1803. * Use more clever time values to setup entropy.
  1804. * Synced with the recent libucl.
  1805. 0.6.7:
  1806. * Use ChaCha20 for DNS generator (more secure DNS id)
  1807. * Unknown symbols now has zero weight and not 1.0
  1808. * Fix fuzzy hashes expire time
  1809. * Fix critical issue in statfiles on FreeBSD 9 (and some other platforms)
  1810. * Add .include_map macro to ucl parser
  1811. * Update libucl
  1812. * Fix headers end detection for DKIM module
  1813. * Fix a bug in received headers parser
  1814. * Validate IP addresses before pushing them to lua
  1815. * Start new documentation project
  1816. * Fixed tonns of other minor bugs
  1817. * Start to prepare for 0.7 with HTTP protocol and new settings
  1818. 0.6.6:
  1819. * Removed issue with BUFSIZ limitation in the controller output
  1820. * Simplify logging symbols escaping
  1821. * Adjusted weights for several rules
  1822. * Improve spamhaus rbl support
  1823. * Removed PBL for received headers checks
  1824. * Added hfilter module that performs various HELO and IP checks.
  1825. * Rspamd can now be reloaded by HUP signal
  1826. * Fuzzy storage should expire hashes properly
  1827. * Build system has been reworked for better supportof pkg-config
  1828. * Various minor bugfixes
  1829. 0.6.5:
  1830. * Fixed critical bug in DNS resolver, introduced in 0.6.4
  1831. * Improved multimap and rbl plugins to skip
  1832. * Add dns_sockets option for tuning sockets per server in DNS resolver
  1833. * Improved packages for rspamd
  1834. 0.6.4:
  1835. * Added io channels for DNS request to balance load and reduce id
  1836. collisions chance
  1837. * Fixed a bug in SPF filter that may cause core dump in specific
  1838. circumstances
  1839. * FIxed default config for rbl module
  1840. * It is possible to get a list of rspamc commands with their descriptions
  1841. * Added SORBS bl to the default config
  1842. * 2tld file for surbl module has been significantly extended
  1843. * Perl modules has been removed from the code.
  1844. * Fixed an issue in libucl when parsing macros
  1845. 0.6.3:
  1846. * Fixed issues with DNS:
  1847. - labels decompression algorithm was fixed;
  1848. - added resolve_mx to lua API;
  1849. - fixed modules that use DNS.
  1850. * Lua modules once_received and emails reworked for new resolver API and UCL.
  1851. * Debian package was polished.
  1852. * Fixed a bug in fuzzy_check module that prevents correct processing messages
  1853. without valid parts.
  1854. 0.6.2:
  1855. * Fuzzy check module has been reworked:
  1856. - now fuzzy_check operates with a group of rules, that define which
  1857. servers sre to be checked;
  1858. - it is possible to specify read_only groups to avoid learning errors;
  1859. - turn fuzzy_check to one_shot mode permanently;
  1860. - fuzzy_check module configuration is now incompatible with the previous
  1861. versions.
  1862. * Imported bugfixes from libucl.
  1863. * Fixed whitelist plugin.
  1864. * Fixed statfiles resizing.
  1865. * Improved logging initialization order.
  1866. * Fixed race condition in the controller worker.
  1867. 0.6.1:
  1868. * Critical bugfixes:
  1869. - fixed build system;
  1870. - fixed in_class setting in bayes learning;
  1871. 0.6.0:
  1872. * Use UCL instead xml for configuration (https://github.com/vstakhov/libucl)
  1873. * Fix statistics module normalization
  1874. * Rework the many modules for the new configuration:
  1875. - surbl has incompatible configuration;
  1876. - fuzzy_check has incompatible configuration;
  1877. - multimap has now new configuration;
  1878. - received_rbl is removed and replaced by rbl module.
  1879. * Removed deprecated options:
  1880. - statfile_pool_size;
  1881. - action and required/reject score for a metric.
  1882. * Simplify build system and unify configuration for all platforms.
  1883. * Improved URL detector (reduced false positive rate).
  1884. * Lua 5.2 is now the default and fully supported version.
  1885. * Tons of bugfixes and minor improvements.
  1886. 0.5.6:
  1887. * Fix bug with counters incrementing in rolling history
  1888. * Detect expl and exp2l as some systems do not have it
  1889. * Support input streams without Content-Length
  1890. * Implement counters output via rspamc and controller interface
  1891. * Fix bug with udp sockets in fuzzy storage
  1892. 0.5.5:
  1893. * New bayes normalizator based on inverse chi-square function
  1894. * Various fixes to fuzzy storage
  1895. * Allow update fuzzy storage only from specific IP addresses
  1896. * Better support of IPv6 and address selection algorithms
  1897. * Add CentOS spec file
  1898. 0.5.4:
  1899. * Fixed issues with diff algorithm
  1900. * Added support of RRD statistics
  1901. * Add webui worker for interface interaction
  1902. * Fix a lot of issues with dynamic conf
  1903. * Fix critical memory leak in settings code
  1904. * Improve stability of the system
  1905. 0.5.3:
  1906. * Added dynamic options
  1907. * Added advanced metaclassfication
  1908. * Added RESTfull API for controller
  1909. * Improved hashing algorithms
  1910. * Various fixes for rspamc client:
  1911. - allow interacting with unix sockets
  1912. - librspamdclient major cleanup
  1913. - bayes is now default classifier
  1914. 0.5.2:
  1915. * Added lua bindings for:
  1916. - basic mime parts, that allows checkign attachements for example;
  1917. - DNS resolver;
  1918. * Existing lua bindings now works without task object allowing to use them
  1919. in custom code.
  1920. * Threads system was reworked to avoid global lua interpreter lock.
  1921. * DKIM module now converts all line endings to CRLF how opendkim does.
  1922. * URL detector is now more accurate for text parts.
  1923. * Several critical bugs and memory leaks were fixed.
  1924. 0.5.1:
  1925. * Added lua worker type to handle network connections in lua.
  1926. * Added lua bindings for async_session, IO dispatcher, memory_pool, and
  1927. worker.
  1928. * Composites can now uses other composites in expressions.
  1929. * Fixes for debian package and for FreeBSD >= 9.1
  1930. * Add support of gmime-2.6 if gmime-2.4 is not found.
  1931. * Improve url detection and phishing detection.
  1932. * Add lua mime_part library to get an access to all message part
  1933. attributes (like filename, length, type).
  1934. 0.5.0:
  1935. * Added SMTP lightweight balancing proxy with XCLIENT support.
  1936. * Added lua bindings for upstreams objects and API.
  1937. * New pre-filters are implemented to support initial checking for messages.
  1938. * Added ratelimit plugin that uses redis protocol to store data.
  1939. * Added ipv6 support to spf and some other modules.
  1940. * Unbreak spf plugin.
  1941. * Allow options with the same name be threated as list.
  1942. * DKIM plugin an parsing code was added.
  1943. * Separate build system to put logic in several shared libraries.
  1944. * Many bugfixes.
  1945. 0.3.2:
  1946. * Add error handling for regexps
  1947. * Fix quit command in controller interface
  1948. * Write symbols weights to rspamc output
  1949. * Improve logic of selecting rspamc version
  1950. * Do not try to parse broken DNS replies
  1951. * Add 'raw' flag to FROM_EXCESS_BASE64 rule (requested by citrin)
  1952. * Output message id in rspamc reply
  1953. * Fix inserting composite symbol
  1954. * Fix output of log line
  1955. * Document composites
  1956. * Add logging for fuzzy checks
  1957. * Add logging for learning
  1958. * Improve logic of learning messages - do not learn more than specific threshold
  1959. * Fix inserting results for symbols that were incorrectly (for example more than 1 time) defined in config file
  1960. * Do not output control characters if output is not terminal
  1961. * Fix some logic errors in learning
  1962. * Consider lua plugins errors as fatal configuration errors
  1963. * Fix wirting message id during fuzzy_add command
  1964. * Display weight of symbols correctly
  1965. * Fixes to winnow learning
  1966. * One more try to improve accuracy of winnow algorithm
  1967. * Add bayesian classifier (initial version)
  1968. * Remove normalizer as it is winnow specific thing, so all statistic algorithms now returns value from 0 to 1
  1969. * Some fixes to fuzzy hashes expiration:
  1970. * Fix assertion while look up value in NULL hash (found by cirtin)
  1971. * Fix normalization for systems that have not tanhl function
  1972. * Ignore rfc822 group addresses
  1973. * Move images library to core rspamd
  1974. * Add lua api to access images properties
  1975. * Add post filters to lua API - filters that would be called after all message's processing
  1976. * Add ability to check for specified symbol in task results from lua
  1977. * Add ability to check for metric's results from lua
  1978. * Add ability to learn specified statfile form lua
  1979. * Add ability to extract filename and size of images from lua
  1980. * Fix assertion while extracting internet address
  1981. * Fix races in fuzzy storage
  1982. * Make spf parser case insensitive
  1983. * Add ability to check hashes of selected mime types
  1984. * Add ability to set minimum size in bytes for mime types
  1985. * Add ability to set minimum dimensions for images
  1986. * Assume all text/* content types as text/plain
  1987. * Fix getting data wrapper for gmime24
  1988. * Many fixes to statfile syncronization system
  1989. * Fixed statfile pool initialization and synchronization with disk
  1990. * Prepare 0.3.2
  1991. * Fix Mail::Rspamd::Config for new rspamd features
  1992. * Use Mail::Rspamd::Config in rspamc client
  1993. * Write user's name to rspamd log
  1994. * Prepare rspamd build infrastructure for creating rpm and deb packages
  1995. * Fix depends
  1996. * Add start script for linux systems
  1997. * Fix shared usage of statfiles
  1998. * Add invalidation of statfiles in case of learning, so now statfiles
  1999. * This should fix shared usage of statfile pool by several processes
  2000. * Fix misprint (reported by az)
  2001. * Fix stupid error when all checks can be done in a single pass
  2002. * New trie based url scanner (based on libcamel)
  2003. * Small fixes to rspamd perl client
  2004. * Write fuzzy hashes info to log
  2005. * Add trie interface to lua api
  2006. * Explain sample config and cleanup it
  2007. 0.3.1:
  2008. * Add modules documentation
  2009. * Continue implementing smtp proxy
  2010. * Implement new learning system, now rspamd should be much more intelligent while learning messages
  2011. * Convert statistic sums to use long double for counters
  2012. * Use hyperbolic tangent for internal normalizer
  2013. * In classify normalize result after comparing, not before
  2014. * New symbols sorter
  2015. * Fix strict aliasing while compiling with optimization
  2016. * Fix tanhl detection for platforms that have not implementation of it
  2017. * Remove several compile warnings
  2018. * Add experimental support of dynamic rules to regexp module
  2019. * Document views configuration
  2020. * Several fixes to documentation
  2021. * Add more logic for dynamic rules
  2022. * Add documentation for dynamic rules
  2023. * Add ability to make negations in networks in dynamic rules
  2024. * Clean up cache items correctly
  2025. * Implement basic SMTP dialog:
  2026. * Implement interaction with smtp upstream (with support of XCLIENT)
  2027. * Check messages received via smtp proxy
  2028. * Add support for sendfile in io dispatcher
  2029. * Fix issues with compatibility of worker_task and smtp proxy
  2030. * Proxy DATA command
  2031. * Fix SMTP
  2032. * Change metric logic
  2033. * Completely remove lex/yacc readers for config
  2034. * Make common sense of metric/action and symbols
  2035. * Sync changes with all plugins
  2036. * Incorrectly removed in previous commit
  2037. * Fix misprint (by Andrej Zverev)
  2038. * announce the "password" keyword in usage list
  2039. * Implement initial version of greylisting triplets storage
  2040. * Fix issues with smtp worker
  2041. * Fix QUIT command in SMTP worker
  2042. * Some fixes about new metrics system (may be incomplete)
  2043. * Get weights of symbol from default metric for symbols cache
  2044. * Fix setting task->from/task->rctp in smtp client
  2045. * Copy from and rcpt correctly
  2046. * Some performance improvements to IO dispatcher (do not drain the whole buffer after a single line readed)
  2047. * Fix smtp data input
  2048. * Fix misprint
  2049. * Add limit of maximum allowed smtp session errors
  2050. * New logic of SURBL module:
  2051. * Use system mkstemp(3) on systems where it is available as glib implementation
  2052. * Try to fix memmove issues in io dispatcher
  2053. * Remove debug from SURBL module
  2054. * Rewrite buffered input for line policy (again)
  2055. * Fix issue with links that are ip addresses in numeric form in surbl
  2056. * On Darwin use BSD style sendfile definition
  2057. * Reorganize platform specific knobs in CMakeLists
  2058. * Use gettimeofday on systems that have not clock_getres
  2059. * Use ftime for dns trans id generation on systems without clock_getres
  2060. * Darwin sendfile(2) support
  2061. * TIMEDB->TIMEB
  2062. * More to previous commit
  2063. * Pass env from main() arguments instead of platform specific global environ
  2064. * Fix compatibility issues
  2065. * Fix -lintl detection
  2066. * Init some variables to avoid problems
  2067. * Remove garbadge (gnome terminal sucks)
  2068. * Add more information about why we drop smtp connection
  2069. * Fix mkstemp call
  2070. * Send to upstream QUIT command at the end of session
  2071. * Check return value of each rspamd_dispatcher_write as in case of write errors sessions can be destroyed early
  2072. * Fix states in smtp dialog
  2073. * Use rspamd_snprintf instead of libc one
  2074. * Fix URLS command
  2075. * Fix reconfigure process of surbl module
  2076. * Fix destroying smtp session (unmap memory and do not delete pool early)
  2077. * Delete pool after using its variables
  2078. * Delay timer must be registered in async session to correctly handle connection termination
  2079. * Register dns requests in session too
  2080. * Make session before registering events
  2081. * Remove events in handlers
  2082. * Add ability to set filters for smtp worker for each smtp stage
  2083. * Add very initial version of DNS resolver (many things to be done)
  2084. * Announce weights and sync
  2085. * Fix few typo
  2086. * Understand short names of facility in logging config
  2087. * Add ability to make whitelist for spf checks
  2088. * Misprint != -> ==
  2089. * Handle lua tag in way that it is not required to write additional text:
  2090. * Strip all starting whitespace symbols from xml texts
  2091. * Fix stupid bug in calculating buffer length while reading file maps
  2092. * Add resolv.conf parsing into dns.c
  2093. * Fix microseconds<->milliseconds conversions
  2094. * Take callback argument in Mail::Rspamd::Client for processing files and directories
  2095. * Print results if rspamc is called for a directory
  2096. * Fix stupid error with surbl module reconfig (another one, blame me)
  2097. * Do not show duplicate urls in url header
  2098. * Fix detection of numeric urls (reported by citrin)
  2099. * Write real time of message's scan to log (not only virtual)
  2100. * Fix chartable module in utf mode
  2101. * Fix parsing of some broken urls
  2102. * Add ability to test regexp with 'T' flag
  2103. * Write more code for DNS resolver:
  2104. * Make DNS resolver working
  2105. * Many improvements to rspamd test suite: now it CAN be used for testing rspamd functionality
  2106. * Write DNS resolver tests
  2107. * Fix issues with memory_pool mutexes and with creating of statfiles
  2108. * Forgotten in previous commit
  2109. * Add support for parsing SPF and SRV records
  2110. * Fix PTR parsing
  2111. * Add tests
  2112. * Make SURBL module to use rspamd dns module
  2113. * Several fixes to DNS logic
  2114. * Remove evdns and use only rspamd resolver
  2115. * Very hard to detect problem with race among error in socket and destroying task while we are writing to socket and go through a hash table
  2116. * Fix resolving in smtp module
  2117. * Init events before configuring resolver in smtp worker
  2118. * Set resolver inside task
  2119. * Fix reload signal (reported by citrin)
  2120. * Some improvements to redirector
  2121. * Call has_forked method to inform POE about fork
  2122. * Fix lua DNS code
  2123. * Decompress labels in DNS packets more strictly
  2124. * Fix some problems with TXT records
  2125. * Try to fix removing of DNS events
  2126. * Do not insert unparsed RR's into reply
  2127. * Calling callbacks may cause destroying session from which we are calling callback so we MUST call callback as the latest action
  2128. * Fix check_smtp_data function
  2129. * Add ability to make views by recipient
  2130. * Add ability to set metric's action from config file
  2131. * Fix bug with writing garbadge if message has no urls or no messages
  2132. * Fix bug with incorrect behaviour of compare_parts_distance function
  2133. * Add ability to assign several actions to one metric
  2134. * Report action in rspamc protocol
  2135. * Mail::Rspamd::Client and rspamc can now understand Action header too
  2136. * Write action to log as well
  2137. * Make valgrind happy about comparing symbols
  2138. * Add more debug to comparing parts distance function
  2139. * Write action even if message has no symbols
  2140. * Make improvements to HTML entites decoder: now it replaces entities with common characters and
  2141. * Add -d option to force debug output
  2142. * Assume 7bit as default transfer encoding
  2143. * Do not overwrite lua plugins and configs if they already exists in target directory
  2144. * Improve logging
  2145. * Write queue id to log
  2146. * Remove test messages from cmake
  2147. * Reopen log file by USR1 signal
  2148. * Add reopenlog method to FreeBSD rc script
  2149. * Adopt foreach for cmake 2.6
  2150. * Fix to rc script
  2151. * Do not try to resolve names with several dots in a row
  2152. * Fix surbl request formatting for ip addresses
  2153. * Handle cases of broken requests
  2154. * Fix problems with parsing compressed names
  2155. * Fix TXT records parsing
  2156. * Fix expanding spf macros that may fail in rare cases
  2157. * Fix another error with early task destroying
  2158. * Handle empty from header
  2159. * Improve reopenlog command in rc script
  2160. * Strip trailing whitespace characters in Mail::Rspamd::Client
  2161. * Use ungreedy match to strip trailing whitespaces
  2162. * Stupid error in calculation compressed label length
  2163. * Some optimizations to client library
  2164. * Do not compare empty parts
  2165. * Empty and non-empty parts are allways different
  2166. * Save in regexp cache the whole regexp with header name (if exists) and with flags
  2167. * Add rspamd_log variable to lua plugins to access logging functions
  2168. * Each part in rspamd task now can have parent part
  2169. * Check for parts distance only for multipart/alternative subparts
  2170. * Do not check attachements even if they are text (but attached as file)
  2171. * Do not die if write (2) returned ENOSPACE while doing logging, turn on throttling mode instead (1 write try in a second)
  2172. * Add ability to turn on debug for specific symbols
  2173. * Add ability to configure dns timeouts and dns retransmits in config file
  2174. * More debug
  2175. * Fix extracting arguments in lua logger interface
  2176. * Turn off debug_ip during reload if it was disabled by new config
  2177. * Improve lua logging
  2178. * Pre-init symbols cache when rereading config
  2179. * Fix lua representing of invalid ip (nil, not 255.255.255.255)
  2180. * Fix R_TO_SEEMS_AUTO rule (by citrin)
  2181. * Add multimap lua plugin
  2182. * Fix some multimap issues
  2183. * Try to save images hashes to fuzzy storage to stop some annoying spammers
  2184. * Allocate some more bytes for read buffer to avoid incorrect behavoiur
  2185. * Add ability to check dns black lists by multimap module
  2186. * Add multimap documentation
  2187. * Fix labels parsing
  2188. * Another try to save regexps in cache correctly
  2189. * Improve test logs for regexps
  2190. * Fix parsing txt records to avoid reading of uninitialized data
  2191. * Fix error with writing symbols cache file
  2192. * Fix error while working in utf mode when raw regexps was not created properly
  2193. * Do not add extra byte while converting text to utf
  2194. * Add error handling for regexps