summaryrefslogtreecommitdiff
path: root/mail/spamassassin
AgeCommit message (Collapse)AuthorFilesLines
2006-06-05Updated to version 3.1.3.heinz3-21/+7
Pkgsrc changes: - patch-bb for no longer necessary (integrated upstream). Changes since version 3.1.2: ============================ - bug 4926: given a certain set of parameters to spamd and a specially formatted input message, users could cause spamd to execute arbitrary commands as the spamd user - bug 4932: the userstate dir and userprefs file would not be created under certain conditions.
2006-05-26Updated to version 3.1.2.heinz8-103/+77
Pkgsrc changes: - The updates for rule files go into $VARBASE/spamassassin/. - This above directory and the directory sa-update-keys for the GPG keys are now handled automatically by OWN_DIRS. - The growing number of *.pre files are managed in a loop in the Makefile. They are no longer contained in the static PLIST. - Removed some unnecessary trailing slashes. - Patching init.pre in order to disable the SPF plugin broke the spf.t test. This is now fixed, although in a rather ugly way :-/. - patch-ab no longer needs to use BSD_INSTALL_DATA_DIR because we create the directories through INSTALLATION_DIRS. - patch-ad and patch-az were removed (changes integrated upstream). - patch-bb fixes a small documentation error. - Fixed some warnings by pkglint about the SUBST framework in Makefile and options.mk. Relevant changes since version 3.1.1: ===================================== - bug 4802: implement DKIM plugin, including whitelist_from_dkim support - bug 3838: work around Perl bug causing captured RE variables to become tainted -- thanks to Mark Martinec for pointing out the bug with Perl itself - bug 4850: re-enable the Razor2 plugin by default due to a service policy change - bug 4826: Razor2 plugin needs to load Mail::SpamAssassin::Timeout module - bug 4827: M::SA::first_existing_path() would return the last array entry passed in if none of the paths were found. Now return undef instead and handle the error when it happens. - bug 4813: generally open RE causes sendmail received header get read in as qmail in error - bug 4839: Logger.pm converts control chars including tab into underscores which confuses a bunch of users when checking debug output. Convert tab into space instead, etc. - bug 4884: if a null message is passed in, there are several variables which end up undefined causing warnings. fake an empty message if no input is given. - bug 4793: when replacing tags in a message (_TAG_), leave the tags that don't exist alone instead of just removing them - bug 4861, 4760: handle dccifd and dccproc failover properly, backport relays_internal and relays_external code, backport bug 4760 fix so that it's not possible to be in internal_networks without being in trusted_networks as well - bug 4901: deal more properly with failures in bgsend(). also, use the proper variable to show when errors occur. - bug 4867: fetchmail changed header formats at some point making Received parsing fail in certain conditions - bug 4699: use M::SA::Timeout for spamd copy_config call and allow for empty $@ values - bug 3754: if there's a problem opening a file via sa-learn or spamassassin, return an error exit value.
2006-03-24Fixed one forgotten case of variable with underscore. This fixes PRheinz3-8/+7
pkg/33139 by Ben Colver.
2006-03-13Updated to version 3.1.1.heinz7-88/+107
Pkgsrc changes: - Generic option "online-tests" replaces "spamassassin-test-net". - Removed underscore from package-internal variables (pkglint complained). - patch-ay disables the SPF plugin to avoid confusing warnings in the log files. - patch-az fixes http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4826. Relevant changes since version 3.1.0: ===================================== - better validate a number of different configuration options - support new Mail::DomainKeys API, which changed incompatibly between 0.18 and 0.80 without warning - more properly handle new Received header formats - bug 4788: backport sa-update from 3.2 along with the local_state_dir code, etc. - bug 4760: strictly validate trusted/internal network configurations - bug 4696: consolidated fixes for timeout bugs - bug 3710: add timeout to connect so spamc -t works - bug 4363: if a message uses CRLF for line endings, use it for header rewrites as well - bug 4748: add ExpressionEngine and Google redirector patterns - bug 3815: add _RELAYCOUNTRY_ tag so that the RelayCountry plugin can put in the list of countries relayed through - bug 4090: x86_64 platforms (linux specifically) have an issue compiling libspamc.so causing RPM build failures - bug 4791: fix issue where perl would throw a UTF-8 warning for certain messages - bugs 4606, 4609: Adjust MIME parsing limits - bug 4780: fix IP_ADDRESS & LOCALHOST regexes to correctly parse IPv6 addresses - bug 4728: DUL rules should only use the last external IP, not all but the first of the external IPs - bug 4700: certain privileged configuration settings can inject code, due to a bad fix for bug 3846. Back that out
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg1-2/+2
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig1-2/+2
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig1-3/+3
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-11-22Removed patch-ar again, as I have found a way to exploit it. Bumpedrillig3-23/+3
PKGREVISION.
2005-11-22Bumped PKGREVISION because of the recent addition of patch-ar.rillig1-1/+2
2005-11-22Added patch-ar, which fixes a Perl error in tainted mode. Removed therillig2-2/+21
checksum of the non-existant patch-ax from distinfo.
2005-11-13Updated to version 3.1.0.heinz12-236/+304
Pkgsrc changes: - p5-Storable is no longer a necessary. - Let DragonFlyBSD also use the rc.d script (patch-ad). - Sa-update needs p5-libwww (for LWP::UserAgent, HTTP::Date), p5-Archive-Tar and p5-IO-Zlib. - Many of the plugins are available as pkgsrc packages (p5-Mail-SPF-Query, p5-IP-Country, p5-Net-Ident, ...) but are not required. - Renamed some options to follow the naming conventions described in the pkgsrc guide. - Removed patch-ax again; it is already incorporated in 3.1.0. - Reworked DESCR to use less than 25 lines. - Removed SPAMASSASSIN_VERSION for clarity of DISTNAME and PKGNAME. - Prepended variables internal to the package with an underscore. - Rearranged MAKE_PARAMS alphabetically. - Simplified some internal variables (concatenation instead of substitution: _EGDIR, _DOCDIR,...) - Loop variables use all lower-case now. - Added a rule to lower score for mail from pkgsrc-bugs in netbsd_lists.cf. - The test t/spf.t (fails for SPF_HELO_*) has a know problem (SA Bug 4685). Relevant changes since version 3.0.4: ===================================== - Apache preforking algorithm adopted; number of spamd child processes is now scaled, according to demand. This provides better VM behaviour when not under peak load. - Inclusion of sa-update script which will allow for updates of rules and scores in between code releases. - added PostgreSQL, MySQL 4.1+, and local SDBM file Bayes storage modules. SQL storage is now recommended for Bayes, instead of DB_File. NDBM_File support has been dropped due to a major bug in that module. - detect legitimate SMTP AUTH submission, to avoid false positives on Dynablock-style rules. - new Advance Fee Fraud (419 scam) rules. - removed use of the Storable module, due to several reported hangs on SMP Linux machines. - Converted several rule/engine components into Plugins such as: AccessDB, AWL, Pyzor, Razor2, DCC, Bayes AutoLearn Determination, etc. - new plugins: DomainKeys (off by default), MIMEHeader: a new plugin to perform tests against header in internal MIME structure, ReplaceTags: plugin by Felix Bauer to support fuzzy text matching, WhiteListSubject: plugin added to support user whitelists by Subject header. - TextCat language guesser moved to a plugin. (This means "ok_languages" is no longer part of the core engine by default.) - Razor: disable Razor2 support by default per our policy, since the service is not free for non-personal use. It's trivial to reenable. - DCC: disable DCC for similar reasons, due to new license terms. - Net::DNS bug: high load caused answer packets to be mixed up and delivered as answers to the wrong request, causing false positives. worked around. - DNSBL lookups and other DNS operations are now more efficient, by using a custom single-socket event-based model instead of Net::DNS. - add support for accreditation services, including Habeas v2. - better URI parsing -- many evasion tricks now caught. - URIBL lookups are prioritized based on the location in the message the URI was found. - mass-check now supports reusing realtime DNSBL hit results, and sample-based Bayes autolearning emulation, to reduce complexity. - sa-learn, spamassassin and mass-check now have optional progress bars. - modify header ordering for DomainKeys compatibility, by placing markup headers at the top of the message instead at the bottom of the list. - spamd/spamc now support remote Bayes training, and reporting spam. - spamc now supports reading its flags from a configuration file using the -F switch, contributed by John Madden. - added SPF-based whitelisting. - Polish rules contributed by Radoslaw Stachowiak. - many rule changes and additions.
2005-11-13Added a patch to fix a potential DoS vulnerability (CVE-2005-3351).heinz3-3/+17
See http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570 http://secunia.com/advisories/17386
2005-11-04Provide the PKG_SUGGESTED_OPTIONS instead of setting the user'srillig1-5/+2
variable's default value.
2005-11-04Explicitly set BUILD_DIRS to emphasize it is different from CONFIGURE_DIRS.rillig1-1/+2
2005-08-06Bump the PKGREVISIONs of all (638) packages that hardcode the locationsjlam1-4/+2
of Perl files to deal with the perl-5.8.7 update that moved all pkgsrc-installed Perl files into the "vendor" directories.
2005-07-13Turn PERL5_PACKLIST into a relative path instead of an absolute path.jlam1-2/+2
These paths are now relative to PERL5_PACKLIST_DIR, which currently defaults to ${PERL5_SITEARCH}. There is no change to the binary packages.
2005-06-22Correct path for ASF MASTER_SITES (thanks to Mark Davies).heinz1-2/+2
2005-06-19Update to version 3.0.4.heinz2-11/+11
This solves the update request in PR pkg/30452. No pkgsrc related changes. This release fixes a recently reported DoS vulnerability. Highlights of the release ------------------------- - Certain invalid "Content-Type" headers would cause SpamAssassin to incorrectly process parts of the message. - Certain long message headers could cause slowness when parsing the message. - Added in SURBL JP list. - URI anti-obfuscation updates. - Additional bug fixes.
2005-05-02RCD_SCRIPTS_EXAMPLEDIR is no longer customizable.reed1-1/+2
And always is defined as share/examples/rc.d which was the default before. This rc.d scripts are not automatically added to PLISTs now also. So add to each corresponding PLIST as required. This was discussed on tech-pkg in late January and late April. Todo: remove the RCD_SCRIPTS_EXAMPLEDIR uses in MESSAGES and elsewhere and remove the RCD_SCRIPTS_EXAMPLEDIR itself.
2005-04-29Updated to version 3.0.3.heinz3-21/+12
Merged the two rules in netbsd_lists.cf into one because problem reports mostly do not contain "x-send-pr" anymore. Disabled installation of netbsd_lists.cf in PKGSYSCONFDIR (it is still included in the "examples" directory). Changes since 3.0.2 =================== - Fixed possible memory bloat from large AutoWhitelist db files - Fixed where user defined rules scores became ignored - Updated parsing code for several Received: header formats - Increased some BAYES_* scores for the network+bayes score set - Document set_tag for Plugin API and added get_tag - Additional bug fixes.
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-02-24Add RMD160 digests.agc1-1/+2
2005-02-13After changing the SUBST-stage to 'pre-configure' for 3.0.2, Makefile.PL washeinz3-15/+9
changed after perl5-configure had been run and the Makefile created. For some people, this resulted in a message Makefile out-of-date with respect to Makefile.PL at the build stage. Omitting the first substitution (sa1) and the corresponding part of patch-ab solved this. This patch had been unnecessary for some time anyway. This should resolve pkg/29255.
2005-01-15Update to 3.0.2. From the changelog:schmonz5-24/+22
This release detects legitimate SMTP AUTH submission, to avoid false positives on Dynablock-style rules. The URIDNSBL plugin has been fixed to honor the uridnsbl_max_domains config option. Various documentation and rule fixes. The ability to deal with 'rewrite_header Subject' markup when no Subject header exists. 'make test' failure on Solaris has been fixed. pkgsrc changes: * Use subst.mk in pre-configure, rather than post-patch, for easier regeneration of patches. OK'd by heinz@.
2004-12-28The default location of the pkgsrc-installed rc.d scripts is nowreed1-1/+2
under share/examples/rc.d. The variable name already was named RCD_SCRIPTS_EXAMPLEDIR. This is from ideas from Greg Woods and others. Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism (as requested by wiz).
2004-11-17Remove obsolete variables. You'll want to use:xtraeme1-15/+1
PKG_OPTIONS.<pkg>+= foo blah
2004-11-08Update to 3.0.1.mjl5-80/+5
This is a minor maintenance release to 3.0.0 and the old archive was no longer available on the primary sites.
2004-10-12Update to version 3.0.0. Tested on NetBSD 1.6.2, Solaris 9 and Debianheinz14-239/+318
3.0. Important changes since 2.64 (for details see the file 'Changes') - support for sender authentication using the Sender Policy Framework (SPF) - checking for web links of known spam advertisers (SURBL) - modular plugin architecture - improved SQL database support for storing user data in server installations - improved email classification - SpamAssassin is now part of the Apache Foundation
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv1-2/+2
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-08-10Update to 2.64.heinz2-9/+14
This also includes the fix for PR pkg/26386 (problems with PKG_CONFIG=no). Summary of major changes since 2.63 ----------------------------------- - Security fix prevents a denial of service attack open to certain malformed messages; this DoS affects all SpamAssassin 2.5x and 2.6x versions to date. - Backported several very reliable rules from the SpamAssassin 3.0.0 codebase.
2004-06-06Packages no longer need to clean up *.subst.sav leftovers.schmonz1-3/+2
2004-05-31Correct bad substitution of @PREFIX@ in spamd.rawheinz3-9/+9
2004-04-23mk/bsd.pkg.install.mk now automatically registersreed1-2/+1
the RCD_SCRIPTS rc.d script(s) to the PLIST. This GENERATE_PLIST idea is part of Greg A. Woods' PR #22954. This helps when the RC_SCRIPTS are installed to a different ${RCD_SCRIPTS_EXAMPLEDIR}. (Later, the default RCD_SCRIPTS_EXAMPLEDIR will be changed to be more clear that they are the examples.) These patches also remove the etc/rc.d/ scripts from PLISTs (of packages that use RCD_SCRIPTS). (This also removes now unused references from openssh* makefiles. Note that qmail package has not been changed yet.) I have been doing automatic PLIST registration for RC_SCRIPTS for over a year. Not all of these packages have been tested, but many have been tested and used. Somethings maybe to do: - a few packages still manually install the rc.d scripts to hard-coded etc/rc.d. These need to be fixed. - maybe remove from mk/${OPSYS}.pkg.dist mtree specifications too.
2004-03-26Introduce SPAMASSASSIN_VERSION. And most significantly use it instead ofseb1-4/+5
PKGVERSION in DISTNAME's definition so PKGREVISION's value does not render it useless. Okay'ed by wiz@.
2004-03-26PKGREVISION bump after openssl-security-fix-update to 0.9.6m.wiz1-1/+2
Buildlink files: RECOMMENDED version changed to current version.
2004-02-10PERL5_REQD is now a list of values, so append to its value instead ofjlam1-2/+2
setting it.
2004-01-26PERL 5.60 will probably never exist. Let's require 5.6.0 instead (hi jlam!).cube1-2/+2
2004-01-25Use PERL5_REQD to set the required version of perl instead of directlyjlam1-2/+2
setting BUILDLINK_DEPENDS.perl.
2004-01-21Update to 2.63. Tested on NetBSD and Solaris 8.heinz5-67/+9
Summary of major changes since 2.62 ----------------------------------- - Fixed bug related to perl 5.005 which stopped SpamAssassin from being runnable - Fixed bug where "spamassassin -l" parameter wouldn't be untainted before being used - Added caching of body rendering results so that the message wouldn't be rendered the same way multiple times unnecessarily. Summary of major changes since 2.61 ----------------------------------- - Fixed two bugs related to Received line generation and parsing. - Modified two rules to reduce false positives. - Fixed bug where spamd temporary init directory wasn't removed in some situations. - Modified HABEAS_SWE to function even if the Habeas headers were out of their normal order. - Fixed bug where reporting wouldn't remove message markup before being learned by Bayes. - Fixed bug where report_safe_copy_headers would reverse the order of the Received headers. - Fixed several bugs in the Bayes system caused by DB_File oddities.
2004-01-06bl3ifyjlam1-3/+5
2003-12-27Update to version 2.61heinz13-230/+91
Summary of major changes since 2.60 ----------------------------------- - Dramatically reduced memory usage of Bayes expiry. - avoid false positives on Outlook 2003 messages, mails from Mac, Palm, and localized versions of Eudora, several AOL MUAs, and newer versions of The Bat! - new set of French translations from Michel Bouissou - updated to reflect new Dynablock DNSBL location - avoids a possible hole that was giving AWL bonuses to spammer forgeries on some networks - miscellaneous bug fixes
2003-12-02print correct path to config files in spamd usage message.grant2-4/+28
2003-12-02formatting fixes, clarify a sentence.grant2-16/+16
2003-12-01Remove DNSBL rules using *.easynet.nl (shut down today, see ↵heinz5-3/+47
http://abuse.easynet.nl/dynablocker.html
2003-11-12PKGREVISION++ after openssl update.jschauma1-2/+2
2003-11-04spamassassin builds and works fine with perl 5.6.0jdolecek1-2/+2
2003-11-03Update to version 2.60 (fixes PR pkg/23318):heinz23-1876/+448
Summary of changes since 2.5x ----------------------------------- - spamd supports UNIX-domain sockets - SSL support for spamc/spamd now usable - improved Bayes text analysis - improved expiration of Bayes-DB - better detection of 'invisible text' and other obfuscation techniques in HTML - new RBL (eg SORBS, SpamCop, Osirusoft dropped) - better handling of RBL timeouts - support for Razor V1 dropped - more flexible header and report rewriting - Perl taint mode enabled by default - bug fixes - new rules
2003-09-13Don't install unpatched (*.orig) files leftover from the patch process.jlam1-1/+4
2003-09-13* Provide a default SPAMASSASSIN_USE_SSL?=NO.jlam1-63/+61
* Use ALL_TARGET appropriately instead of using a post-build target. * Get rid of DEPTHFIRST* variables and do the "depth-first" listing by using a reverse sort instead. * Get rid of extra shell processes. * Tabify.