Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge pull request #4683 from twesterhever/temp-improve-freemail-aff | Vsevolod Stakhov | 2023-11-03 | 1 | -1/+1 |
|\ | | | | | [Minor] Improve FREEMAIL_AFF capture rates | ||||
| * | [Minor] Improve FREEMAIL_AFF capture rates | twesterhever | 2023-11-03 | 1 | -1/+1 |
| | | |||||
* | | Merge pull request #4681 from twesterhever/temp-suspicious-url-composite | Vsevolod Stakhov | 2023-11-03 | 1 | -0/+6 |
|\ \ | | | | | | | [Enhancement] Add composite rule for suspicious URLs in suspicious messages | ||||
| * | | [Enhancement] Add composite rule for suspicious URLs in suspicious messages | twesterhever | 2023-11-03 | 1 | -0/+6 |
| |/ | |||||
* | | Merge pull request #4680 from twesterhever/temp-zpaq | Vsevolod Stakhov | 2023-11-03 | 1 | -0/+2 |
|\ \ | | | | | | | [Minor] Treat *.zpaq attachments as archives and harmful | ||||
| * | | [Minor] Treat *.zpaq attachments as archives and harmful | twesterhever | 2023-11-03 | 1 | -0/+2 |
| |/ | | | | | | | Rationale: https://dshield.org/diary/Malware+Dropped+Through+a+ZPAQ+Archive/30366/ | ||||
* | | Merge pull request #4682 from twesterhever/temp-no-ua | Vsevolod Stakhov | 2023-11-03 | 1 | -0/+10 |
|\ \ | |/ |/| | [Minor] Add rule for messages missing both X-Mailer and User-Agent header | ||||
| * | [Minor] Add rule for messages missing both X-Mailer and User-Agent header | twesterhever | 2023-11-03 | 1 | -0/+10 |
|/ | |||||
* | [Feature] Allow to set `max_users` for Redis bayes backend | Vsevolod Stakhov | 2023-11-02 | 1 | -5/+19 |
| | | | | Issue: #4659 | ||||
* | [Conf] Add note | Vsevolod Stakhov | 2023-11-02 | 1 | -1/+1 |
| | | | | Issue: #4677 | ||||
* | [Minor] Improve diagnostic by rising log level | Vsevolod Stakhov | 2023-11-01 | 1 | -3/+3 |
| | |||||
* | Merge pull request #4675 from arkamar/algorithm | Vsevolod Stakhov | 2023-11-01 | 2 | -0/+2 |
|\ | | | | | [Minor] Add missing <algorithm> include for gcc 14 | ||||
| * | [Minor] Add missing <algorithm> include for gcc 14 | Petr Vaněk | 2023-11-01 | 2 | -0/+2 |
|/ | | | | | | | | | | | | This commit addresses a compilation issue when using GCC 14. According to GCC 14's porting guide [1], some C++ Standard Library headers no longer include other headers they used to use internally. Specifically, <algorithm> must now be explicitly included. [1] https://gcc.gnu.org/gcc-14/porting_to.html See-also: https://bugs.gentoo.org/916438 Signed-off-by: Petr Vaněk <arkamar@atlas.cz> | ||||
* | [Minor] Add selector transformer `filter_method` | Vsevolod Stakhov | 2023-10-31 | 1 | -1/+22 |
| | |||||
* | Merge pull request #4674 from rspamd/log_json | Vsevolod Stakhov | 2023-10-30 | 6 | -171/+329 |
|\ | | | | | [Project] Support of JSON logging | ||||
| * | [Minor] Use floating point ts instead of microsecondslog_json | Vsevolod Stakhov | 2023-10-30 | 1 | -2/+2 |
| | | |||||
| * | [Feature] Escape JSON when needed | Vsevolod Stakhov | 2023-10-30 | 4 | -169/+286 |
| | | |||||
| * | [Minor] Fix some minor issues | Vsevolod Stakhov | 2023-10-30 | 1 | -2/+6 |
| | | |||||
| * | [Project] Preliminary support of JSON logging | Vsevolod Stakhov | 2023-10-30 | 4 | -38/+75 |
| | | |||||
* | | [Fix] Do not cleanup hyperscan files unless new ones are loaded | Vsevolod Stakhov | 2023-10-30 | 3 | -34/+58 |
| | | |||||
* | | Merge pull request #4672 from fatalbanana/robot_export_vars | Vsevolod Stakhov | 2023-10-30 | 1 | -6/+10 |
|\ \ | | | | | | | [Minor] Make Robot Framework loop unfunny | ||||
| * | | [Minor] Make Robot Framework loop unfunny | Andrew Lewis | 2023-10-30 | 1 | -6/+10 |
|/ / | |||||
* | | Merge pull request #4668 from moisseev/webui | Vsevolod Stakhov | 2023-10-28 | 9 | -14/+36 |
|\ \ | |/ |/| | [WebUI] Update map editor | ||||
| * | [WebUI] Update map editor | moisseev | 2023-10-27 | 9 | -14/+36 |
| | | | | | | | | CodeJar 3.7.0 -> 4.2.0 | ||||
* | | [Minor] Update version | Vsevolod Stakhov | 2023-10-27 | 1 | -1/+1 |
| | | |||||
* | | Release 3.7.33.7.3 | Vsevolod Stakhov | 2023-10-27 | 1 | -0/+3 |
| | | | | | | | | * [Fix] Emergency fix for the hyperscan path error | ||||
* | | [Minor] Really fix the issue | Vsevolod Stakhov | 2023-10-27 | 1 | -2/+2 |
| | | |||||
* | | [Fix] A workaround for brain-damaged std::filesystem behaviour | Vsevolod Stakhov | 2023-10-27 | 1 | -13/+2 |
| | | | | | | | | Issue: #4665 | ||||
* | | [Minor] Update version | Vsevolod Stakhov | 2023-10-26 | 1 | -1/+1 |
| | | |||||
* | | Release 3.7.23.7.2 | Vsevolod Stakhov | 2023-10-26 | 1 | -0/+9 |
|/ | | | | | | | | | | * [Feature] rbl: support checking returncodes by CIDR * [Feature] rbl: support checking returncodes by regex * [Feature] rbl: support globbed return codes * [Fix] DMARC reporting: fix reporting for subdomains * [Fix] Deal with fmtlib exceptions properly * [Fix] backport fix for dlfcn.h from backward-cpp * [Rules] Blank spam detection | ||||
* | Merge pull request #4657 from fatalbanana/rbl_matchers | Vsevolod Stakhov | 2023-10-26 | 4 | -14/+100 |
|\ | | | | | [Feature] rbl: support use of different matchers for return codes | ||||
| * | [Minor] Reiterate on the previous changes | Andrew Lewis | 2023-10-26 | 4 | -16/+16 |
| | | | | | | | | | | - Demote message to info level - Name it returncodes_matcher for better specificity | ||||
| * | [Feature] rbl: support globbed return codes | Andrew Lewis | 2023-10-25 | 3 | -3/+17 |
| | | |||||
| * | [Feature] rbl: support checking returncodes by CIDR | Andrew Lewis | 2023-10-25 | 3 | -21/+44 |
| | | |||||
| * | [Feature] rbl: support checking returncodes by regex | Andrew Lewis | 2023-10-24 | 3 | -5/+20 |
| | | |||||
| * | [Minor] rbl: support use of different matchers for return codes | Andrew Lewis | 2023-10-24 | 3 | -3/+37 |
| | | |||||
* | | Merge pull request #4656 from twesterhever/temp-tighten-attachment-policy | Vsevolod Stakhov | 2023-10-25 | 1 | -6/+25 |
|\ \ | | | | | | | Tighten rspamd's attachment policy | ||||
| * | | [Minor] Remove duplicate *.app attachment type | twesterhever | 2023-10-25 | 1 | -1/+0 |
| | | | | | | | | | | | | Reported by @fatalbanana. | ||||
| * | | Revert "[Minor] Increase scoring of *.exe attachments" | twesterhever | 2023-10-24 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | Reverted based on feedback by @moisseev. This reverts commit 8171424d846a3e33b5d0f9f7f4ee09ec8d553a03. | ||||
| * | | [Minor] Add additional bad attachment types | twesterhever | 2023-10-22 | 1 | -0/+11 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - app: Executable Application, blocked in Outlook by default - aspx: Active Server Page Extended, blocked in Outlook by default - dll: Dynamic-link Library - dqy: Microsoft Query File, blocking recommended in MS365 - iqy: ditto - mht: MHTML File, often abused for phishing and exploit attempts - mhtml: ditto - oqy: Microsoft Query File, blocking recommended in MS365 - rqy: ditto - slk: Microsoft Symbolic Link - wim: Windows Imaging Format | ||||
| * | | [Minor] Increase scoring of *.exe attachments | twesterhever | 2023-10-22 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | These are already banned in most environments, including GMail and Outlook. We may as well bump this score up to 4 eventually. | ||||
| * | | [Minor] Incorporate additional bad attachments from Microsoft | twesterhever | 2023-10-22 | 1 | -0/+9 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These are as follows: - htc: HTML Component File - pyc: Compiled Python Script - pyo: Optimized Compiled Python Module - pyw: Python Script To Be Executed With Suppressed Terminal Window - pyz: Python Zip Application - pyzw: Python Zip Application - vhd: Virtual Hard Disk - vhdx: Virtual Hard Disk Extended - wsf: Windows Script File Note that the Python file types remain unscored in archives, so distribution of these in source tarballs and the like is not affected by this commit. Source: https://support.microsoft.com/en-us/office/blocked-attachments-in-outlook-434752e1-02d3-4e90-9124-8b81e49a8519?ui=en-us&rs=en-us&ad=us | ||||
| * | | [Minor] Refer to third parties for attachment handling whenever possible | twesterhever | 2023-10-22 | 1 | -6/+6 |
| | | | | | | | | | | | | | | | | | | | | | This avoids confusion and enqueries to the rspamd project, if it is made clear that the decision to score certain attachments high has been incorporated from a well-known third party, such as Google's or Microsoft's attachment handling policy. | ||||
* | | | Merge pull request #4661 from moisseev/webui | Vsevolod Stakhov | 2023-10-25 | 2 | -9/+20 |
|\ \ \ | | | | | | | | | [WebUI] Fix history table vanishing | ||||
| * | | | [WebUI] Fix history table vanishing | moisseev | 2023-10-25 | 2 | -9/+20 |
| |/ / | | | | | | | | | | on repeated rows per page input | ||||
* | | | [Minor] Improve diagnostics | Vsevolod Stakhov | 2023-10-24 | 1 | -7/+15 |
| | | | |||||
* | | | [Fix] Deal with fmtlib exceptions properly | Vsevolod Stakhov | 2023-10-23 | 1 | -139/+166 |
|/ / | |||||
* | | [Minor] Try to fix ICAP scanners by adding use_specific_content_type parameter | Vsevolod Stakhov | 2023-10-22 | 1 | -5/+14 |
| | | | | | | | | Issue: #4643 | ||||
* | | [Minor] Simplify by using <filesystem> | Vsevolod Stakhov | 2023-10-21 | 1 | -64/+33 |
|/ | |||||
* | Merge pull request #4649 from fatalbanana/rspamd_sharedir | Vsevolod Stakhov | 2023-10-17 | 1 | -2/+2 |
|\ | | | | | [Minor] RSPAMD_SHAREDIR is called SHAREDIR in configuration |