aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* [Fix] Arc: Another bunch of fixes for arc signingVsevolod Stakhov2019-05-141-4/+3
|
* [Fix] Arc: More arc signing fixesVsevolod Stakhov2019-05-142-21/+31
|
* [Fix] Fix ARC signing after fixing another bug in it...Vsevolod Stakhov2019-05-132-5/+5
|
* [Feature] URL: Apply stringprep to hostnames to filter garbageVsevolod Stakhov2019-05-131-0/+49
|
* [Minor] HTML: Allow to extract base url from the tagVsevolod Stakhov2019-05-131-4/+8
|
* [Fix] Ratelimit: Fix dynamic scoreVsevolod Stakhov2019-05-131-1/+1
|
* [Minor] Update version to 1.9.4Vsevolod Stakhov2019-05-131-1/+1
|
* Release 1.9.31.9.3Vsevolod Stakhov2019-05-131-0/+44
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * [Conf] Add IP_SCORE_FREEMAIL composite rule * [Feature] Add cryptobox method to generate dkim keypairs * [Feature] Add fast hashes to lua cryptobox hash * [Feature] Add least passthrough results * [Feature] Allow oversign if exists mode * [Feature] Clickhouse: Modernise table initial schema * [Feature] Implement IUF interface for specific fast hashes * [Feature] Lua_util: Allow to obfuscate different fields * [Feature] Tune memory management in Rspamd and Lua * [Fix] Avoid buffer overflow when printing long lua strings * [Fix] Change the default oversigning headers to a more sane list * [Fix] Clickhouse: Do not store digest as it is not needed now * [Fix] Clickhouse: Fix lots of storage issues * [Fix] Clickhouse: Support custom actions * [Fix] Deny URLs where hostname is bogus * [Fix] Do not blacklist mail by SPF/DMARC for local/authed users * [Fix] Fix DoS caused by bug in glib * [Fix] Fix UCL parsing of the multiline strings * [Fix] Fix buffer overflow when printing small floats * [Fix] Fix init code for servers keypairs cache * [Fix] Fix issue with urls with no tld (e.g. IP) * [Fix] Fix memory in arc signing logic * [Fix] Fix memory leak in language detector during reloads * [Fix] Fix mixed case content type processing * [Fix] Fix processing of the ip urls in file * [Fix] Fix use after free * [Fix] HTML: Fix `size` attribute processing * [Fix] Hum, it seems that 99ff1c8 was not correct * [Fix] Lua_task: Fix task:get_from method * [Fix] Preserve fd when mapping file to scan * [Fix] Re-use milter_headers settings when doing arc signing * [Fix] Set dmarc force action as least action * [Fix] Switch to GMT * [Fix] allow PKCS7 signatures to be text/plain, too * [Project] Add initial version of the vault management tool * [Project] Add vault support for DKIM and ARC signing * [Project] Implement keys rotation in the vault * [Project] Improve dkim keys generation for vault * [Project] Improve keys creation in rspamadm vault * [Rework] Move lua_worker to a dedicated unit * [WebUI] Add URL fragments (#) support * [WebUI] Fix AJAX request URL Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
* [Fix] Re-use milter_headers settings when doing arc signingVsevolod Stakhov2019-05-131-2/+19
| | | | Issue: #2073
* [Minor] Change the default list of oversigned headersVsevolod Stakhov2019-05-131-2/+2
| | | | | | | | | | | | | | | | | | | Trivia: `Subject` header needs to be oversigned as an attacker could add some 'bad' subject to DKIM signed emails with no subject (rare but possible case). This header is clearly displayed to a user hence, its presence as well as absence MUST be oversigned explicitly. `Reply-To` header is widely used to designate a special address used for replies only but not for authentication checks. It is thus possible to add a malicious `Reply-To` header to force users to reply to a DKIM signed email to some attacker's controlled email address. It clearly opens surface for social engineering like attacks and this header must thus be unconditionally oversigned even if not presented in an original message. Issue: #2887
* Merge pull request #2897 from moisseev/webuiVsevolod Stakhov2019-05-124-9/+41
|\ | | | | [WebUI] Add URL fragments (#) support
| * [WebUI] Add URL fragments (#) supportmoisseev2019-05-124-9/+41
| | | | | | | | | | | | | | | | for tab switching - Show the correct tab when the page is loaded if there is a hash in the URL. - Changing the hash in the URL when the tab is changed. - Change the tab when the hash changes in the URL (back / forward buttons).
* | Merge pull request #2896 from hartzell/typosVsevolod Stakhov2019-05-122-2/+2
|\ \ | | | | | | [Minor] Fix a couple of typos (separately, transferred)
| * | Fix typos (separately, transferred)hartzell2019-05-112-2/+2
|/ /
* | [Minor] Fix gc in lua testsVsevolod Stakhov2019-05-101-1/+1
| |
* | [Minor] Allow to tune GC related optionsVsevolod Stakhov2019-05-109-8/+48
| |
* | [Minor] Sign list-help headerVsevolod Stakhov2019-05-101-2/+2
| | | | | | | | Issue: #2887
* | [Fix] Change the default oversigning headers to a more sane listVsevolod Stakhov2019-05-101-8/+8
| | | | | | | | Issue: #2887
* | [Minor] More human friendly statsVsevolod Stakhov2019-05-101-5/+5
|/
* [Minor] Jitter gc cycles and fix format stringVsevolod Stakhov2019-05-101-2/+2
|
* [Minor] Add some more memory stats loggingVsevolod Stakhov2019-05-101-4/+11
|
* [Minor] MisprintVsevolod Stakhov2019-05-101-1/+1
|
* [Feature] Tune memory management in Rspamd and LuaVsevolod Stakhov2019-05-102-4/+47
|
* Merge pull request #2891 from moisseev/webuiVsevolod Stakhov2019-05-091-1/+1
|\ | | | | [WebUI] Fix AJAX request URL
| * [WebUI] Fix AJAX request URLmoisseev2019-05-091-1/+1
| | | | | | | | Fixes: #1552
* | [Fix] Preserve fd when mapping file to scanVsevolod Stakhov2019-05-091-5/+8
|/
* [Fix] Fix DoS caused by bug in glibVsevolod Stakhov2019-05-081-0/+8
|
* [Minor] Clickhouse: Change default partitioning schemaVsevolod Stakhov2019-05-071-1/+1
|
* Merge pull request #2886 from heraklit256/p7s-textplainVsevolod Stakhov2019-05-061-1/+1
|\ | | | | [Fix] allow PKCS7 signatures to be text/plain, too
| * [Fix] allow PKCS7 signatures to be text/plain, tooheraklit2562019-05-041-1/+1
| |
| * Merge pull request #13 from rspamd/masterheraklit2562019-05-0488-2221/+4270
| |\ | | | | | | merge upstream into local master
* | | [Minor] Pet luacheckVsevolod Stakhov2019-05-051-6/+6
| | |
* | | [Feature] Allow oversign if exists modeVsevolod Stakhov2019-05-051-14/+31
| |/ |/|
* | [Minor] Allow to get workers countVsevolod Stakhov2019-05-041-0/+17
| |
* | [Fix] Do not blacklist mail by SPF/DMARC for local/authed usersVsevolod Stakhov2019-05-042-5/+36
| | | | | | | | Issue: #2871
* | [Minor] Pet luacheckVsevolod Stakhov2019-05-041-1/+2
| |
* | [Minor] Clickhouse: Add clock skew protectionVsevolod Stakhov2019-05-031-0/+5
| |
* | Revert "[Minor] Return to use of the monotonic timers"Vsevolod Stakhov2019-05-032-3/+45
| | | | | | | | This reverts commit baa142db22e670b1bc22dc785768141f0ecc1190.
* | [Minor] Allow to get memory stats from the workersVsevolod Stakhov2019-05-031-0/+35
| |
* | [Fix] Clickhouse: Fix lots of storage issuesVsevolod Stakhov2019-05-031-104/+83
| |
* | [Minor] Fix number, sighVsevolod Stakhov2019-05-031-2/+2
| |
* | [Fix] Lua_task: Fix task:get_from methodVsevolod Stakhov2019-05-031-4/+4
| |
* | [Minor] Do not stop when cannot parse query string in clang pluginVsevolod Stakhov2019-05-031-1/+2
| |
* | [Minor] Fix format stringVsevolod Stakhov2019-05-031-1/+1
| |
* | [Minor] Missing includeVsevolod Stakhov2019-05-032-1/+2
| |
* | [Fix] Fix memory leak in language detector during reloadsVsevolod Stakhov2019-05-031-0/+2
| |
* | [Rework] Move lua_worker to a dedicated unitVsevolod Stakhov2019-05-034-587/+619
| |
* | [Fix] Fix memory in arc signing logicVsevolod Stakhov2019-05-031-0/+5
| |
* | [Minor] Return to use of the monotonic timersVsevolod Stakhov2019-05-032-45/+3
| |
* | [Feature] Clickhouse: Modernise table initial schemaVsevolod Stakhov2019-05-031-2/+4
| |
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-30 06:22:58 +0000