Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | [Rework] Slashing: Change versioning schema - move to 2.0 | Vsevolod Stakhov | 2019-05-18 | 4 | -29/+8 |
| | |||||
* | [Minor] Increase priority of the asn module | Vsevolod Stakhov | 2019-05-18 | 1 | -1/+1 |
| | |||||
* | [Minor] Fix condition | Vsevolod Stakhov | 2019-05-18 | 1 | -1/+1 |
| | |||||
* | [Minor] Add docs | Vsevolod Stakhov | 2019-05-17 | 1 | -0/+21 |
| | |||||
* | [Project] Add preliminary version of maps expressions | Vsevolod Stakhov | 2019-05-17 | 1 | -0/+161 |
| | |||||
* | [Minor] Lua_expression: Allow simplier invocation of create function | Vsevolod Stakhov | 2019-05-17 | 1 | -37/+45 |
| | |||||
* | [Minor] Fix setting structure's fields | Vsevolod Stakhov | 2019-05-17 | 1 | -0/+1 |
| | |||||
* | [Rework] Rework expression API | Vsevolod Stakhov | 2019-05-17 | 6 | -101/+203 |
| | |||||
* | [Minor] Allow to execute expressions with process closures | Vsevolod Stakhov | 2019-05-17 | 2 | -5/+35 |
| | |||||
* | [Rework] Reputation: Slashing - change name of symbols | Vsevolod Stakhov | 2019-05-17 | 1 | -2/+5 |
| | |||||
* | [Minor] Try to fix Debian linking issue | Vsevolod Stakhov | 2019-05-17 | 1 | -0/+1 |
| | |||||
* | [Project] Reputation: Rework get function and scores calculations | Vsevolod Stakhov | 2019-05-15 | 1 | -27/+31 |
| | |||||
* | [Minor] Try use math.tanh if available | Vsevolod Stakhov | 2019-05-15 | 1 | -0/+3 |
| | |||||
* | [Project] Reputation: Migrate to adaptive EMA model | Vsevolod Stakhov | 2019-05-15 | 1 | -226/+145 |
| | |||||
* | [Minor] Fix resolver docs | Vsevolod Stakhov | 2019-05-14 | 1 | -2/+2 |
| | |||||
* | [Minor] Return score with verdict | Vsevolod Stakhov | 2019-05-14 | 1 | -8/+10 |
| | |||||
* | [Rework] Reputation: Remove ipnet from the ip reputation | Vsevolod Stakhov | 2019-05-14 | 1 | -23/+2 |
| | |||||
* | [Test] Add some tests for arc signing | Vsevolod Stakhov | 2019-05-14 | 4 | -0/+92 |
| | |||||
* | [Fix] Arc: Another bunch of fixes for arc signing | Vsevolod Stakhov | 2019-05-14 | 1 | -4/+3 |
| | |||||
* | [Fix] Arc: More arc signing fixes | Vsevolod Stakhov | 2019-05-14 | 2 | -21/+31 |
| | |||||
* | [Fix] Fix ARC signing after fixing another bug in it... | Vsevolod Stakhov | 2019-05-13 | 2 | -5/+5 |
| | |||||
* | [Feature] URL: Apply stringprep to hostnames to filter garbage | Vsevolod Stakhov | 2019-05-13 | 1 | -0/+49 |
| | |||||
* | [Minor] HTML: Allow to extract base url from the tag | Vsevolod Stakhov | 2019-05-13 | 1 | -4/+8 |
| | |||||
* | [Fix] Ratelimit: Fix dynamic score | Vsevolod Stakhov | 2019-05-13 | 1 | -1/+1 |
| | |||||
* | [Minor] Update version to 1.9.4 | Vsevolod Stakhov | 2019-05-13 | 1 | -1/+1 |
| | |||||
* | Release 1.9.31.9.3 | Vsevolod Stakhov | 2019-05-13 | 1 | -0/+44 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * [Conf] Add IP_SCORE_FREEMAIL composite rule * [Feature] Add cryptobox method to generate dkim keypairs * [Feature] Add fast hashes to lua cryptobox hash * [Feature] Add least passthrough results * [Feature] Allow oversign if exists mode * [Feature] Clickhouse: Modernise table initial schema * [Feature] Implement IUF interface for specific fast hashes * [Feature] Lua_util: Allow to obfuscate different fields * [Feature] Tune memory management in Rspamd and Lua * [Fix] Avoid buffer overflow when printing long lua strings * [Fix] Change the default oversigning headers to a more sane list * [Fix] Clickhouse: Do not store digest as it is not needed now * [Fix] Clickhouse: Fix lots of storage issues * [Fix] Clickhouse: Support custom actions * [Fix] Deny URLs where hostname is bogus * [Fix] Do not blacklist mail by SPF/DMARC for local/authed users * [Fix] Fix DoS caused by bug in glib * [Fix] Fix UCL parsing of the multiline strings * [Fix] Fix buffer overflow when printing small floats * [Fix] Fix init code for servers keypairs cache * [Fix] Fix issue with urls with no tld (e.g. IP) * [Fix] Fix memory in arc signing logic * [Fix] Fix memory leak in language detector during reloads * [Fix] Fix mixed case content type processing * [Fix] Fix processing of the ip urls in file * [Fix] Fix use after free * [Fix] HTML: Fix `size` attribute processing * [Fix] Hum, it seems that 99ff1c8 was not correct * [Fix] Lua_task: Fix task:get_from method * [Fix] Preserve fd when mapping file to scan * [Fix] Re-use milter_headers settings when doing arc signing * [Fix] Set dmarc force action as least action * [Fix] Switch to GMT * [Fix] allow PKCS7 signatures to be text/plain, too * [Project] Add initial version of the vault management tool * [Project] Add vault support for DKIM and ARC signing * [Project] Implement keys rotation in the vault * [Project] Improve dkim keys generation for vault * [Project] Improve keys creation in rspamadm vault * [Rework] Move lua_worker to a dedicated unit * [WebUI] Add URL fragments (#) support * [WebUI] Fix AJAX request URL Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru> | ||||
* | [Fix] Re-use milter_headers settings when doing arc signing | Vsevolod Stakhov | 2019-05-13 | 1 | -2/+19 |
| | | | | Issue: #2073 | ||||
* | [Minor] Change the default list of oversigned headers | Vsevolod Stakhov | 2019-05-13 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | | | | Trivia: `Subject` header needs to be oversigned as an attacker could add some 'bad' subject to DKIM signed emails with no subject (rare but possible case). This header is clearly displayed to a user hence, its presence as well as absence MUST be oversigned explicitly. `Reply-To` header is widely used to designate a special address used for replies only but not for authentication checks. It is thus possible to add a malicious `Reply-To` header to force users to reply to a DKIM signed email to some attacker's controlled email address. It clearly opens surface for social engineering like attacks and this header must thus be unconditionally oversigned even if not presented in an original message. Issue: #2887 | ||||
* | Merge pull request #2897 from moisseev/webui | Vsevolod Stakhov | 2019-05-12 | 4 | -9/+41 |
|\ | | | | | [WebUI] Add URL fragments (#) support | ||||
| * | [WebUI] Add URL fragments (#) support | moisseev | 2019-05-12 | 4 | -9/+41 |
| | | | | | | | | | | | | | | | | for tab switching - Show the correct tab when the page is loaded if there is a hash in the URL. - Changing the hash in the URL when the tab is changed. - Change the tab when the hash changes in the URL (back / forward buttons). | ||||
* | | Merge pull request #2896 from hartzell/typos | Vsevolod Stakhov | 2019-05-12 | 2 | -2/+2 |
|\ \ | | | | | | | [Minor] Fix a couple of typos (separately, transferred) | ||||
| * | | Fix typos (separately, transferred) | hartzell | 2019-05-11 | 2 | -2/+2 |
|/ / | |||||
* | | [Minor] Fix gc in lua tests | Vsevolod Stakhov | 2019-05-10 | 1 | -1/+1 |
| | | |||||
* | | [Minor] Allow to tune GC related options | Vsevolod Stakhov | 2019-05-10 | 9 | -8/+48 |
| | | |||||
* | | [Minor] Sign list-help header | Vsevolod Stakhov | 2019-05-10 | 1 | -2/+2 |
| | | | | | | | | Issue: #2887 | ||||
* | | [Fix] Change the default oversigning headers to a more sane list | Vsevolod Stakhov | 2019-05-10 | 1 | -8/+8 |
| | | | | | | | | Issue: #2887 | ||||
* | | [Minor] More human friendly stats | Vsevolod Stakhov | 2019-05-10 | 1 | -5/+5 |
|/ | |||||
* | [Minor] Jitter gc cycles and fix format string | Vsevolod Stakhov | 2019-05-10 | 1 | -2/+2 |
| | |||||
* | [Minor] Add some more memory stats logging | Vsevolod Stakhov | 2019-05-10 | 1 | -4/+11 |
| | |||||
* | [Minor] Misprint | Vsevolod Stakhov | 2019-05-10 | 1 | -1/+1 |
| | |||||
* | [Feature] Tune memory management in Rspamd and Lua | Vsevolod Stakhov | 2019-05-10 | 2 | -4/+47 |
| | |||||
* | Merge pull request #2891 from moisseev/webui | Vsevolod Stakhov | 2019-05-09 | 1 | -1/+1 |
|\ | | | | | [WebUI] Fix AJAX request URL | ||||
| * | [WebUI] Fix AJAX request URL | moisseev | 2019-05-09 | 1 | -1/+1 |
| | | | | | | | | Fixes: #1552 | ||||
* | | [Fix] Preserve fd when mapping file to scan | Vsevolod Stakhov | 2019-05-09 | 1 | -5/+8 |
|/ | |||||
* | [Fix] Fix DoS caused by bug in glib | Vsevolod Stakhov | 2019-05-08 | 1 | -0/+8 |
| | |||||
* | [Minor] Clickhouse: Change default partitioning schema | Vsevolod Stakhov | 2019-05-07 | 1 | -1/+1 |
| | |||||
* | Merge pull request #2886 from heraklit256/p7s-textplain | Vsevolod Stakhov | 2019-05-06 | 1 | -1/+1 |
|\ | | | | | [Fix] allow PKCS7 signatures to be text/plain, too | ||||
| * | [Fix] allow PKCS7 signatures to be text/plain, too | heraklit256 | 2019-05-04 | 1 | -1/+1 |
| | | |||||
| * | Merge pull request #13 from rspamd/master | heraklit256 | 2019-05-04 | 88 | -2221/+4270 |
| |\ | | | | | | | merge upstream into local master | ||||
* | | | [Minor] Pet luacheck | Vsevolod Stakhov | 2019-05-05 | 1 | -6/+6 |
| | | |