aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* [Rework] Slashing: Change versioning schema - move to 2.0Vsevolod Stakhov2019-05-184-29/+8
|
* [Minor] Increase priority of the asn moduleVsevolod Stakhov2019-05-181-1/+1
|
* [Minor] Fix conditionVsevolod Stakhov2019-05-181-1/+1
|
* [Minor] Add docsVsevolod Stakhov2019-05-171-0/+21
|
* [Project] Add preliminary version of maps expressionsVsevolod Stakhov2019-05-171-0/+161
|
* [Minor] Lua_expression: Allow simplier invocation of create functionVsevolod Stakhov2019-05-171-37/+45
|
* [Minor] Fix setting structure's fieldsVsevolod Stakhov2019-05-171-0/+1
|
* [Rework] Rework expression APIVsevolod Stakhov2019-05-176-101/+203
|
* [Minor] Allow to execute expressions with process closuresVsevolod Stakhov2019-05-172-5/+35
|
* [Rework] Reputation: Slashing - change name of symbolsVsevolod Stakhov2019-05-171-2/+5
|
* [Minor] Try to fix Debian linking issueVsevolod Stakhov2019-05-171-0/+1
|
* [Project] Reputation: Rework get function and scores calculationsVsevolod Stakhov2019-05-151-27/+31
|
* [Minor] Try use math.tanh if availableVsevolod Stakhov2019-05-151-0/+3
|
* [Project] Reputation: Migrate to adaptive EMA modelVsevolod Stakhov2019-05-151-226/+145
|
* [Minor] Fix resolver docsVsevolod Stakhov2019-05-141-2/+2
|
* [Minor] Return score with verdictVsevolod Stakhov2019-05-141-8/+10
|
* [Rework] Reputation: Remove ipnet from the ip reputationVsevolod Stakhov2019-05-141-23/+2
|
* [Test] Add some tests for arc signingVsevolod Stakhov2019-05-144-0/+92
|
* [Fix] Arc: Another bunch of fixes for arc signingVsevolod Stakhov2019-05-141-4/+3
|
* [Fix] Arc: More arc signing fixesVsevolod Stakhov2019-05-142-21/+31
|
* [Fix] Fix ARC signing after fixing another bug in it...Vsevolod Stakhov2019-05-132-5/+5
|
* [Feature] URL: Apply stringprep to hostnames to filter garbageVsevolod Stakhov2019-05-131-0/+49
|
* [Minor] HTML: Allow to extract base url from the tagVsevolod Stakhov2019-05-131-4/+8
|
* [Fix] Ratelimit: Fix dynamic scoreVsevolod Stakhov2019-05-131-1/+1
|
* [Minor] Update version to 1.9.4Vsevolod Stakhov2019-05-131-1/+1
|
* Release 1.9.31.9.3Vsevolod Stakhov2019-05-131-0/+44
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * [Conf] Add IP_SCORE_FREEMAIL composite rule * [Feature] Add cryptobox method to generate dkim keypairs * [Feature] Add fast hashes to lua cryptobox hash * [Feature] Add least passthrough results * [Feature] Allow oversign if exists mode * [Feature] Clickhouse: Modernise table initial schema * [Feature] Implement IUF interface for specific fast hashes * [Feature] Lua_util: Allow to obfuscate different fields * [Feature] Tune memory management in Rspamd and Lua * [Fix] Avoid buffer overflow when printing long lua strings * [Fix] Change the default oversigning headers to a more sane list * [Fix] Clickhouse: Do not store digest as it is not needed now * [Fix] Clickhouse: Fix lots of storage issues * [Fix] Clickhouse: Support custom actions * [Fix] Deny URLs where hostname is bogus * [Fix] Do not blacklist mail by SPF/DMARC for local/authed users * [Fix] Fix DoS caused by bug in glib * [Fix] Fix UCL parsing of the multiline strings * [Fix] Fix buffer overflow when printing small floats * [Fix] Fix init code for servers keypairs cache * [Fix] Fix issue with urls with no tld (e.g. IP) * [Fix] Fix memory in arc signing logic * [Fix] Fix memory leak in language detector during reloads * [Fix] Fix mixed case content type processing * [Fix] Fix processing of the ip urls in file * [Fix] Fix use after free * [Fix] HTML: Fix `size` attribute processing * [Fix] Hum, it seems that 99ff1c8 was not correct * [Fix] Lua_task: Fix task:get_from method * [Fix] Preserve fd when mapping file to scan * [Fix] Re-use milter_headers settings when doing arc signing * [Fix] Set dmarc force action as least action * [Fix] Switch to GMT * [Fix] allow PKCS7 signatures to be text/plain, too * [Project] Add initial version of the vault management tool * [Project] Add vault support for DKIM and ARC signing * [Project] Implement keys rotation in the vault * [Project] Improve dkim keys generation for vault * [Project] Improve keys creation in rspamadm vault * [Rework] Move lua_worker to a dedicated unit * [WebUI] Add URL fragments (#) support * [WebUI] Fix AJAX request URL Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
* [Fix] Re-use milter_headers settings when doing arc signingVsevolod Stakhov2019-05-131-2/+19
| | | | Issue: #2073
* [Minor] Change the default list of oversigned headersVsevolod Stakhov2019-05-131-2/+2
| | | | | | | | | | | | | | | | | | | Trivia: `Subject` header needs to be oversigned as an attacker could add some 'bad' subject to DKIM signed emails with no subject (rare but possible case). This header is clearly displayed to a user hence, its presence as well as absence MUST be oversigned explicitly. `Reply-To` header is widely used to designate a special address used for replies only but not for authentication checks. It is thus possible to add a malicious `Reply-To` header to force users to reply to a DKIM signed email to some attacker's controlled email address. It clearly opens surface for social engineering like attacks and this header must thus be unconditionally oversigned even if not presented in an original message. Issue: #2887
* Merge pull request #2897 from moisseev/webuiVsevolod Stakhov2019-05-124-9/+41
|\ | | | | [WebUI] Add URL fragments (#) support
| * [WebUI] Add URL fragments (#) supportmoisseev2019-05-124-9/+41
| | | | | | | | | | | | | | | | for tab switching - Show the correct tab when the page is loaded if there is a hash in the URL. - Changing the hash in the URL when the tab is changed. - Change the tab when the hash changes in the URL (back / forward buttons).
* | Merge pull request #2896 from hartzell/typosVsevolod Stakhov2019-05-122-2/+2
|\ \ | | | | | | [Minor] Fix a couple of typos (separately, transferred)
| * | Fix typos (separately, transferred)hartzell2019-05-112-2/+2
|/ /
* | [Minor] Fix gc in lua testsVsevolod Stakhov2019-05-101-1/+1
| |
* | [Minor] Allow to tune GC related optionsVsevolod Stakhov2019-05-109-8/+48
| |
* | [Minor] Sign list-help headerVsevolod Stakhov2019-05-101-2/+2
| | | | | | | | Issue: #2887
* | [Fix] Change the default oversigning headers to a more sane listVsevolod Stakhov2019-05-101-8/+8
| | | | | | | | Issue: #2887
* | [Minor] More human friendly statsVsevolod Stakhov2019-05-101-5/+5
|/
* [Minor] Jitter gc cycles and fix format stringVsevolod Stakhov2019-05-101-2/+2
|
* [Minor] Add some more memory stats loggingVsevolod Stakhov2019-05-101-4/+11
|
* [Minor] MisprintVsevolod Stakhov2019-05-101-1/+1
|
* [Feature] Tune memory management in Rspamd and LuaVsevolod Stakhov2019-05-102-4/+47
|
* Merge pull request #2891 from moisseev/webuiVsevolod Stakhov2019-05-091-1/+1
|\ | | | | [WebUI] Fix AJAX request URL
| * [WebUI] Fix AJAX request URLmoisseev2019-05-091-1/+1
| | | | | | | | Fixes: #1552
* | [Fix] Preserve fd when mapping file to scanVsevolod Stakhov2019-05-091-5/+8
|/
* [Fix] Fix DoS caused by bug in glibVsevolod Stakhov2019-05-081-0/+8
|
* [Minor] Clickhouse: Change default partitioning schemaVsevolod Stakhov2019-05-071-1/+1
|
* Merge pull request #2886 from heraklit256/p7s-textplainVsevolod Stakhov2019-05-061-1/+1
|\ | | | | [Fix] allow PKCS7 signatures to be text/plain, too
| * [Fix] allow PKCS7 signatures to be text/plain, tooheraklit2562019-05-041-1/+1
| |
| * Merge pull request #13 from rspamd/masterheraklit2562019-05-0488-2221/+4270
| |\ | | | | | | merge upstream into local master
* | | [Minor] Pet luacheckVsevolod Stakhov2019-05-051-6/+6
| | |