aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* [Minor] Regexp is case-insensitive, omit redundant characterstwesterhever2022-11-061-1/+1
|
* [Minor] Fix rule commenttwesterhever2022-11-061-1/+1
|
* [Minor] Limit CIDv1 detection to 128 bytestwesterhever2022-11-061-1/+1
| | | As requested by @vstakhov in https://github.com/rspamd/rspamd/pull/4310#pullrequestreview-1148226107, try to limit the performance impact of this regular expression. However, given that there does not seem to be a hard limit for CIDv1s in IPFS itself, using an hashing algorithm with large output my permit miscreants to get around this rule.
* [Minor] Implement multibase prefixes for IPFS gateway URL ruletwesterhever2022-11-061-2/+2
|
* [Minor] Clarify that IPFS *gateway* URLs are likely considered malicioustwesterhever2022-11-061-2/+2
|
* [Enhancement] Add IPFS URL heuristictwesterhever2022-10-151-1/+16
|
* [Fix] Another try to fix close method in lua_tcpVsevolod Stakhov2022-10-131-0/+6
|
* [Minor] Add some debug logs for mx_checkVsevolod Stakhov2022-10-131-0/+3
|
* Merge pull request #4304 from twesterhever/temp-comosites-freemail-affVsevolod Stakhov2022-10-121-0/+7
|\ | | | | [Enhancement] Add composite rule against AFF involving freemailers
| * [Enhancement] Add composite rule against AFF involving freemailerstwesterhever2022-10-091-0/+7
| |
* | [Test] Add more tests for the passwords checking logicVsevolod Stakhov2022-10-111-8/+24
| |
* | [Fix] Another fix for the enable passwordVsevolod Stakhov2022-10-111-0/+4
| |
* | [Fix] Try to fix the case where password == enable_passwordVsevolod Stakhov2022-10-101-10/+26
| | | | | | | | Issue: #4306
* | Merge pull request #4300 from yo000/masterVsevolod Stakhov2022-10-101-0/+2
|\ \ | | | | | | Add basic auth to metadata_exporter http pusher
| * | Add basic auth to metadata_exporter http pusheryo2022-10-081-0/+2
| | |
* | | [Minor] Add method to extract shared memory from RAII ownershipVsevolod Stakhov2022-10-091-0/+8
| | |
* | | Merge pull request #4305 from moisseev/faviconVsevolod Stakhov2022-10-091-1/+1
|\ \ \ | | | | | | | | [Minor] Fix copy-paste error
| * | | [Minor] Fix copy-paste errormoisseev2022-10-091-1/+1
|/ / / | | | | | | | | | PR: #4302
* | | Merge pull request #4302 from moisseev/faviconVsevolod Stakhov2022-10-091-1/+3
|\ \ \ | |_|/ |/| | [Fix] Fix favicon.ico Content-Type header
| * | [Fix] Fix favicon.ico Content-Type headermoisseev2022-10-091-1/+3
|/ / | | | | | | Issue: #4301
* | [Rework] Start movement of the hyperscan related routines into a single unitVsevolod Stakhov2022-10-082-1/+99
| |
* | [Minor] Add some more methods and tests to the file raii abstractionVsevolod Stakhov2022-10-082-3/+101
| |
* | [Feature] Share hyperscan database among processesVsevolod Stakhov2022-10-081-4/+116
| |
* | [Minor] Include config.h to the build targetVsevolod Stakhov2022-10-081-1/+1
|/
* [Minor] Remove redundant checkVsevolod Stakhov2022-10-071-6/+0
|
* [Minor] Detect ffsll presence in a target systemVsevolod Stakhov2022-10-063-1/+33
|
* [Fix] Fix hang when close is usedVsevolod Stakhov2022-10-051-0/+18
|
* Merge pull request #4294 from yo000/masterVsevolod Stakhov2022-10-051-1/+1
|\ | | | | [Fix] metadata_exporter: fix the case with many recipients
| * Fix metadata_exporter with many recipientsyo2022-10-041-1/+1
| |
* | [Minor] Do not use names starting from `_` as they might be reservedVsevolod Stakhov2022-10-041-2/+2
|/ | | | Issue: #4293
* [Test] Fix failing testVsevolod Stakhov2022-10-031-1/+1
|
* [Fix] Fix emoji joiner FPVsevolod Stakhov2022-10-031-1/+3
| | | | Issue: #4290
* [Minor] Update version to 3.4Vsevolod Stakhov2022-10-011-1/+1
|
* Release 3.33.3Vsevolod Stakhov2022-10-011-0/+123
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * [Conf] Add missing groups for whitelist module symbols * [CritFix] Neural: Fix keys regression after #3968 * [Feature] Accept upstream in lua_tcp * [Feature] Add ability to statically maintain disabled/enabled patterns * [Feature] Add function to store upstreams for HTTP urls * [Feature] Allow augmentations set in Lua API * [Feature] Allow lua_http module to accept upstreams * [Feature] Allow to limit write access to fuzzy storage by key * [Feature] Allow to sort symbols output * [Feature] Check content for binary stuff before dumping it to Lua * [Feature] Implement symbols augmentations * [Fix] Add missing flags * [Fix] Add more sanity checks for rua in dmarc_report * [Fix] Adjust length of the fuzzy checks for short text parts * [Fix] Another try to fix add headers compatibility logic * [Fix] Another try to fix race condition in the runtime destruction * [Fix] Avoid cyclic references in symcache and fix memory leaks * [Fix] Avoid overriding IP with Sender IP * [Fix] BAD_REP_POLICIES did not trigger when message was classified as spam by Bayes * [Fix] Bind AF_UNIX DGRAM client connection to annonymous address * [Fix] Disable IPv6 lookups for Blocklist.de RBL * [Fix] Distinguish dynamic and static items * [Fix] Dkim: Ignore unknown DKIM kv pairs as stated in RFC * [Fix] Dmarc report: Use local timezone instead of GMT * [Fix] Do not exclude authenticated users from URIBL lookups * [Fix] Empty envelopes should not be emitted as arrays (json+messagepack) when populated envelopes are objects. This greatly complicates decoding in strictly typed languages. * [Fix] External_relay: Restore the originating hostname check * [Fix] Fix DKIM keys with spaces still allowing errors on invalid base64 * [Fix] Fix copying of sockaddr_un addresses * [Fix] Fix crash with cname replies * [Fix] Fix dependencies propagation * [Fix] Fix iteration over milter headers * [Fix] Fix ordering when sorting symcache * [Fix] Fix reading of the cached maps * [Fix] Fix several issues with the HTTP keepalive parsing * [Fix] Fix stack smashing * [Fix] Fix synchronous auth/select in lua_redis * [Fix] Fix various symcache issues * [Fix] Ignore all (I hope) unknown DKIM signature KV pairs * [Fix] Ignore directories in RarV5 archives * [Fix] Libucl: avoid memory leak on objects merging * [Fix] Lua_tcp: Another try to fix closing logic * [Fix] Mempool: Fix alloc_array function to actually multiply nmembers by size * [Fix] Only check allowed fuzzy worker update ips for non-unix sockets * [Fix] Plug memory leak in regexp destruction with pcre2 * [Fix] Properly check the original email flag * [Fix] Properly deal with `get_symbol/get_metric_symbol` ambiguity * [Fix] Properly parse expressions atoms * [Fix] Properly set `Host` in rspamd_proxy * [Fix] Rbl: Fix received positioned checks * [Fix] Remove check for a score with no symbol being registered * [Fix] Same fix for lua_tcp * [Fix] Skip cname records when processing SPF records * [Fix] Skip sending dmarc reports in no-opt mode fixes https://github.com/rspamd/rspamd/issues/4241 * [Fix] Stop slow timer on task destruction * [Fix] Symcache: Do not use C style comparators in C++ sorts * [Fix] Try to avoid a corner case for `@` pattern * [Fix] Try to fix dkim reputation adjustements * [Fix] Try to fix passthrough results processing logic * [Fix] Try to fix the mess with read only flag * [Fix] Upstreams: Don't ignore revive_time config option * [Fix] Use proper format string, sigh... * [Fix] Use space category in ragel automata to resolve space characters * [Fix] Zstd: Fix compression with the new Zstd API * [Fix] milter_headers: Header fields may be inserted at wrong position. * [Project] Add experimental HTTP statistics backend * [Project] Add more methods for symbols addition * [Project] Add raii_sink file helper * [Project] Add some more methods * [Project] Add symbols processing methods * [Project] Allow `=` separated augmentations to be treated as kv pairs * [Project] Allow to extract augmentation values * [Project] Few more methods * [Project] Fix on conditions * [Project] Further efforts to make a more consistent architecture * [Project] Further rework * [Project] Further rework tracking * [Project] Further split of the code * [Project] Get rid of C style ctors/dtors * [Project] Http_stat: Notice statfiles when creating runtime * [Project] Implement dynamic items lookup and processing * [Project] Implement item finalization * [Project] Implement more methods * [Project] Implement runtime creation * [Project] Implement settings processing + some neats * [Project] Implement some conditions checks * [Project] Implement validation logic * [Project] More methods * [Project] Move runtime cache part to a separate unit * [Project] Move some more methods * [Project] Re-implement counters method * [Project] Reimplement dependencies processing * [Project] Remove obsoleted methods * [Project] Remove old code (finally) * [Project] Rework symbols execution * [Project] Some more adjustments in symbols registration * [Project] Start rewrite symcache in c++ * [Project] Support augmentations with values * [Project] Symcache: Use ordered filters to avoid extra lookups * [Rework] Another movement * [Rework] Augmentations can now imply flags * [Rework] Further steps * [Rework] Further work on deps processing * [Rework] Implement cache resorting * [Rework] Isolate disable/enable logic for the configuration ucl objects * [Rework] Move item implementation to a separate header * [Rework] Multimap: Avoid prefilters usage where augmentations can be used * [Rework] Pass upstream when sending TCP requests * [Rework] Re-implement cache sorting * [Rework] Reimplement saving/loading the cache items * [Rework] Reiterate on priorities * [Rework] Rework files structure * [Rework] Rewrite rspamc in C++ * [Rework] Simplify scores check and extend it to pre/post filters * [Rework] Switch minimum C++ standard version to C++20 * [Rework] Try to fix the mess with types & flags * [Rework] Use another version of hash table from the same author * [Rework] Use dynamic items for calling callbacks * [Rework] Use dynamic items in the callbacks * [Rework] Use hash map for id->symbol mappings * [Rework] Use khash instead of uthash in rdns compression logic
* [Fix] Fix DNS reply handling for HTTP mapsVsevolod Stakhov2022-10-011-1/+1
|
* [Minor] Add some standard types for .p7s extensionVsevolod Stakhov2022-09-291-2/+2
|
* Merge pull request #4283 from BtbN/fix_unix_fuzzyVsevolod Stakhov2022-09-262-6/+24
|\ | | | | [Fix] Allow fuzzy worker to listen on AF_UNIX sockets successfully
| * [Fix] Fix copying of sockaddr_un addressesTimo Rothenpieler2022-09-261-6/+8
| | | | | | | | | | | | | | | | | | | | They can be very tiny (hence the adjustment of the size assert) and the path can contain intermittent null bytes, so the only choice is to trust the input slen and copy the whole struct. An autobound unix socket uses an abstract address, which starts with a null byte, hence this change is neccesary for such an address getting copied properly.
| * [Fix] Bind AF_UNIX DGRAM client connection to annonymous addressTimo Rothenpieler2022-09-261-0/+13
| | | | | | | | Fixes #4278
| * [Fix] Only check allowed fuzzy worker update ips for non-unix socketsTimo Rothenpieler2022-09-261-0/+3
|/ | | | | The source will always be localhost, it makes no sense to check for allowed IPs.
* [Fix] Same fix for lua_tcpVsevolod Stakhov2022-09-251-7/+20
|
* [Fix] Fix crash with cname repliesVsevolod Stakhov2022-09-251-14/+27
|
* [Minor] Oops, remove experimentVsevolod Stakhov2022-09-241-7/+0
|
* [Minor] Some neats when working with Unix socketsVsevolod Stakhov2022-09-244-28/+67
|
* [Minor] Plug memory leak on cdb backend closingVsevolod Stakhov2022-09-241-3/+4
|
* [Minor] Add some error reportingVsevolod Stakhov2022-09-241-4/+10
|
* [Fix] Libucl: avoid memory leak on objects mergingVsevolod Stakhov2022-09-241-0/+2
|
* [Minor] Partially restore reverted patchVsevolod Stakhov2022-09-241-0/+1
|
* Revert "[Minor] Try to fix refcounts related crash"Vsevolod Stakhov2022-09-241-3/+2
| | | | This reverts commit 5bae837e5fb282e055a9d80d9d6aaf7eaed9a2d5.
* [Fix] Lua_tcp: Another try to fix closing logicVsevolod Stakhov2022-09-241-1/+24
|