aboutsummaryrefslogtreecommitdiffstats
path: root/centos
Commit message (Collapse)AuthorAgeFilesLines
* [Minor] Update Debian and RPM package versionsPeter Wu2020-02-141-1/+1
| | | | | | * Add script that can be used after tagging to update versions. * Example (for this commit): `./set-version.sh 2.4` * Clear Debian changelog, this information is not updated anyway.
* [Conf] Introduce maps.d directoriesmoisseev2019-09-181-5/+5
|
* [Rework] Kill 2tld.incVsevolod Stakhov2019-08-161-1/+0
|
* [Minor] Simplify logrotate postrotate scriptAnton Yuzhaninov2019-08-091-2/+2
| | | | Tested on CentOS 7.
* [Rework] Slashing: Distinguish lualibdir, pluginsdir and sharedirVsevolod Stakhov2018-12-261-1/+1
|
* [Minor] Link breaks spec...Vsevolod Stakhov2018-12-041-1/+1
|
* [Minor] Add workaround for bug in RHEL 6Vsevolod Stakhov2018-12-041-0/+1
|
* [Fix] Fix endless loop when waiting for Rspamd to stopVsevolod Stakhov2018-08-071-4/+15
|
* [Minor] Enable libunwind in packagesVsevolod Stakhov2018-06-291-5/+5
|
* [Fix] Fix CentOS logrotate script for systemdVsevolod Stakhov2018-04-172-1/+14
|
* Various changes to CentOS RPMChristian Glombek2017-08-221-9/+3
| | | | | | Update License to be the same as repo (ASL 2.0) Remove hardcoded user and group Add %{rspamd_pluginsdir}/lib/*.lua
* [Fix] RPM postinstallAndrew Lewis2017-08-111-1/+1
| | | | - Fixes: #1696
* [Minor] RPM: do chown in %postAndrew Lewis2017-06-121-1/+2
|
* [Minor] RPM/DEB: fix log directory ownership on systemd platformsAndrew Lewis2017-06-111-1/+5
|
* [Conf] Do away with systemd specifics completelyAndrew Lewis2017-06-112-8/+6
|
* Revert "Disable reload command in rc scripts"Vsevolod Stakhov2016-08-221-1/+8
| | | | This reverts commit 869af99b494d89e6d100657db4d5430cc6539f51.
* [Minor] Fix RPM spec for CentOS 6Andrew Lewis2016-08-011-1/+6
|
* [Rework] Remove systemd socket activationAndrew Lewis2016-07-272-9/+7
|
* [Minor] Require `ragel` for Debian/RPM package buildAndrew Lewis2016-07-251-1/+1
|
* [Minor] Create local dirs in packagesVsevolod Stakhov2016-07-251-0/+4
|
* [Minor] Add rspamd_stats to RPM specfileAndrew Lewis2016-07-251-0/+1
|
* [Minor] Drop CentOS service file patch (#709)Andrew Lewis2016-07-072-16/+0
|
* [Fix] Update RPM spec/sources (#700)Andrew Lewis2016-07-072-12/+9
|
* [Minor] Add missing file to the specVsevolod Stakhov2016-05-291-0/+1
| | | | Issue: #640
* [Minor] Update CentOS service file patchAndrew Lewis2016-03-211-3/+3
|
* RPM: Add missing file to spec (Fixes #516)Andrew Lewis2016-02-061-0/+1
|
* RPM BuildRequires: s/perl/perl-Digest-MD5/Andrew Lewis2016-02-051-2/+2
|
* Disable reload command in rc scriptsVsevolod Stakhov2016-01-281-8/+1
|
* Update CentOS7 service file patch againAndrew Lewis2016-01-181-4/+4
|
* Release 1.1.01.1.0Vsevolod Stakhov2016-01-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Incompatible change: sqlite3 and per_user behaviour: Now both redis and sqlite3 follows the common principles for per-user statistics: 1) If per-user statistics is enabled check per-user tokens ONLY 2) If per-user statistics is not enabled then check common tokens ONLY If you need old behaviour, then you'd need to use separate classifier for per-user statistics. * Implement redis statistics backend and cache * Implement autolearning for statistics * Reworked statistics architecture from scratch * Add hyperscan (https://github.com/01org/hyperscan) engine for regular expressions: - add lazy loader for hyperscan databases - rework regexp cache to have joint pcre/hyperscan scanning - implement hyperscan pre-filter support - add compilation guards for bad expressions - implement `rspamadm control recompile` command - implement hyperscan cache monitoring - slides: <https://highsecure.ru/rspamd-hyperscan.pdf> * Implement flexible task logging * Rework fuzzy worker: - it is now possible to run multiple fuzzy workers; - implement lazy writing as sqlite3 is bad at concurrent writing; - add retries for simple sql commands in fuzzy backend; - use fine-grained transactions for fuzzy; - implement new multi-pubkeys mode; - allow encrypted only storages; - rework statistics for fuzzy; - add `rspamadm control fuzzystat` command for extended statistics; - implement human readable output for the previous command; - add condition script for learning fuzzy storage; * Various fixes to SPF: - fix `redirect` records; - fix domains when parsing mx/ptr/a records in includes/redirects; - fix issues with multiple addresses in SPF records; - ignore SPF results in case of DNS failure; - adjust TTL of records when resolving subelements of SPF records; - always select `v=spf1` line if it is available - do not cache records with DNS failure in subrequests; - ignore records with temporary fails during subrequests resolving; - fix `RDNS_RC_NOREC` support; * Add clang plugin for static analysis: - implement static checks for `rspamd_printf` format strings; * Add 'allow_raw_input' option for non-mime messages * Recognize types using libmagic * Fix parsing of IPv6 received headers * Add new interface of communication between workers in rspamd * Add support for named socketpairs * Don't write URLs by default as it is too verbose * Set status for HTTP replies * Try load `rspamd.conf.override` * Implement words decaying for text parts to limit many checks * Improve support of SA rules and plugins: - add check_for_shifted_date and check_for_missing_to_header eval rules; - add 'check_relays_unparseable' support; - add `check_for_mime('mime_attachement')` function; - use new re_cache interface for all SA rules; - add support for `Mail::SpamAssassin::Plugin::MIMEHeader`; - add support of 'special' SA headers to `exists` function; - fix issue when SA metas contain other metas; - fix freemail rules; * Many fixes to the URL parser * Match any newline character in regexps * Fix resolving of upstreams and detection of poor IPv6 configurations * Parse upstreams selection algorithm from the configuration line * Add `reresolve` command to the control interface * Generate fuzzy hashes from task metadata (URLs and headers) * Add method to check if IP is local and `local_addrs` option * Implement forced timeout for delayed filters * Disable fast path of pcre-jit as it seems to be broken * Bayes fixes: - new normalizer function; - really use weights of tokens from the OSB algorithm; - restore multiple classifiers support; * Rules changes: - add `R_SUSPICIOUS_URL` rule that detects obfuscated URL's; - improve empty image rule; - rework `FORGED_RECIPIENTS` rule; - reduce weight of `SUSPICIOUS_RECIPS`; - fix `*_NORESOLVE_MX` symbols in hfilter; - add `SUBJ_ALL_CAPS` rule with support of UTF8 - add spamhaus SBL to uribl - fix `SUSPICIOUS_RECIPS` and `SORTED_RECIPS` rules - remove `R_TO_SEEMS_AUTO` as it generates a lot of FP; - add new Message-ID regexp for Thunderbird (by @moisseev); * Plugins changes: - allow ratelimit plugin to set symbol instead of pre-result - support IP DNS black lists for URIBL (e.g spamhaus SBL); - drop deprecated SURBL bits (by @fatalbanana) - rename `JP_SURBL_MULTI` to `ABUSE_SURBL` (by @fatalbanana) - add `SURBL_BLOCKED` (by @fatalbanana) - add `CR_SURBL` - SURBL: allow fallthrough to default symbol (by @fatalbanana) - Settings: fix IP match (by @fatalbanana) - SURBL: add missing symbols to metric (by @fatalbanana) - allow processing images urls for SURBL - unconditionally disable SPF for authenticated users and local networks * Rework ratelimit plugin - switch to `rates` instead of old and stupid strings to setup; - check if a bucket is zero and disable the corresponding limits' - turn off all buckets by default; - check either `rcpt` or `user` buckets, not all together' - document new `rates` and `symbol` options; - inform user about what buckets are used in the configuration; * Add neural network **experimental** plugin * Add a sample script to learn neural network from rspamd logs * Add documentation strings support to rspamd: - add strings for the main configuration options; - document workers options; - add internal plugin options; - create `rspamadm confighelp` routine; - implement human readable output for the previous command; - add subtree search support; - add keyword search support; * Documentation improvements, tutorials section, statistics description * Many other minor and major bugfixes not noted here Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
* Remove hiredis from dependsVsevolod Stakhov2016-01-111-3/+2
|
* Fix PID file pathVsevolod Stakhov2015-12-231-1/+1
|
* Simplify specVsevolod Stakhov2015-12-221-25/+3
|
* Fix centos specAlexey AL2015-12-131-1/+1
| | | libmagic included in file-devel package
* Add libmagic dependencyVsevolod Stakhov2015-11-121-2/+2
|
* Update version.Vsevolod Stakhov2015-10-271-1/+1
|
* Update specVsevolod Stakhov2015-10-261-1/+2
|
* Update CentOS7 service file patchAndrew Lewis2015-10-141-3/+6
|
* Fix rc scriptsVsevolod Stakhov2015-10-141-1/+2
|
* Add missing entries to spec.Vsevolod Stakhov2015-09-281-0/+2
|
* Release 1.0.21.0.2Vsevolod Stakhov2015-09-231-1/+1
| | | | | | | | | | | | | | | | | | | * Fix critical bug in webui that prevents password from being sent * Rework webui view: - Switch to d3.js for graphs - Improve piechart look - Rework colors for piechart - Fix layout for symbols - Fix refresh button * Add descriptions for whitelist maps * Fix build on arm (#379) * Fix issue with the last element in the radix trie * Add more tests for radix trie algorithm * Allow to extract URLs from query strings of other URLs (#361) * Initialize rrd fields before writing to file * Fix double free if no password has been specified Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
* Release 1.0.11.0.1Vsevolod Stakhov2015-09-221-1/+1
| | | | | | | | | | | | | | | | | | | | * Add writing to rrd from the controller * Fixed lots of bugs in rrd code * Adopt new DNS API in hfilter plugin (by @AlexeySa) * Allow only one controller process to manage rrd file * Set event base for fuzzy calls * Improve fuzzy IO errors logging * Add rra extraction function to rrd library * Add graph handler to the controller * Cache correct passwords to avoid too high CPU usage when working with webui * Controller sockets are owned by router do not export them to task * Optimize logging by skipping hash table search if it's empty * Fix loading issue whith broken statfiles * Print assertions from glib to rspamd logger * Load legacy `lua/rspamd.local.lua` * Update webui with some fixes to learning and scanning Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
* Merge changes from OBS (except for EL6 stuff)Andrew Lewis2015-09-171-2/+13
|
* Update linux build specs.Vsevolod Stakhov2015-09-171-22/+29
|
* Try to fix build on suse.Vsevolod Stakhov2015-06-231-0/+3
|
* Release 0.9.40.9.4Vsevolod Stakhov2015-05-211-1/+4
| | | | | | | | | | | | | | | | * Fix critical bugs in tokenization algorithm * Write unit tests for tokenization * Add documentation for lua_tcp * Switch off legacy tokenization by default. * Fix critical bugs in words normalization * Add lua bindings to tokenizer. * Implement storing of HTTP headers inside task * Add lua API to accerss HTTP headers data * Implemented base64 encoding suitable for MIME * Use caseless hash and equal functions for HTTP request headers. * Improve debian architectures support (by @dottedmag) Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
* Release 0.9.30.9.3Vsevolod Stakhov2015-05-191-1/+4
| | | | | | | * Revert incorrect regexp change that broke the default rules * Fix lua_tcp module Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
* Release 0.9.20.9.2Vsevolod Stakhov2015-05-191-1/+4
| | | | | | | | | | | | | * Fix error on spawning unique workers. * Add preliminary version of generic LUA TCP requests API. * Use lua 5.1 if luajit is not available (Arm64, PowerPC, s390x etc) * Fix fuzzy mime strings with only type. * Improve thunderbird sanity checks. * Fix critical bug on matching regular expressions. * Make hiredis optional dependency. * Fix multiple bugs in daemon reloading Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
* Release 0.9.1.0.9.1Vsevolod Stakhov2015-05-171-1/+4
| | | | | | | | | | | | | * Restore utf8 validation for regular expressions to avoid crashes * Fix symbols displaying in the interface * Add symbol groups to the interface * Fix maps ID parsing in the controller * Add multimap and regexp modules documentation * Backport fixes from libucl * Fix debian package (by @dottedmag) * Rework XXH32 invocations Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
* Update RPM BuildRequires for 0.9Andrew Lewis2015-05-131-2/+3
|