OpenBSD CVS

CVS log for src/libexec/spamd/grey.c


[BACK] Up to [local] / src / libexec / spamd

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.67 / (download) - annotate - [select for diffs], Wed Mar 8 04:43:06 2023 UTC (14 months, 3 weeks ago) by guenther
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, HEAD
Changes since 1.66: +1 -2 lines
Diff to previous 1.66 (colored)

Delete obsolete /* ARGSUSED */ lint comments.

ok miod@ millert@

Revision 1.66 / (download) - annotate - [select for diffs], Thu Oct 25 06:42:35 2018 UTC (5 years, 7 months ago) by mestre
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.65: +13 -1 lines
Diff to previous 1.65 (colored)

When spamd(8) runs in greylist mode in the parent process (which runs
greywatcher()) we know that the only files that it will ever access are
PATH_SPAMD_DB in rw mode, alloweddomains_file in r and that it will need to
execute PATH_PFCTL so we can unveil(2) them with those permissions.

OK deraadt@ millert@ beck@

Revision 1.65 / (download) - annotate - [select for diffs], Wed Oct 18 17:31:01 2017 UTC (6 years, 7 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4, OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.64: +31 -14 lines
Diff to previous 1.64 (colored)

Make blacklist entries override the whitelist.  When running spamd
in greylisting mode, it is not uncommon for an IP to get whitelisted
before it shows up on a spam blacklist.  With this change, spamd
will check its blacklists before adding a WHITE entry to the
<spamd-white> pf table.  If the IP matches a blacklist, the WHITE
entry will be removed.  OK phessler@

Revision 1.64 / (download) - annotate - [select for diffs], Thu Oct 20 21:09:46 2016 UTC (7 years, 7 months ago) by mestre
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2, OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.63: +1 -3 lines
Diff to previous 1.63 (colored)

- Remove useless var assignment
- Use memset(*b, 0, len) instead of bzero(*b, len)
- Use memcpy(*dst, *src, len) instead of bcopy(*src, *dst, len)
- Use explicit_bzero(3) instead of bzero(3) to clean temporary HMAC

Remarks from deraadt@ (duly noted!!), reviewed and OK by henning@ and tb@

Revision 1.63 / (download) - annotate - [select for diffs], Fri Mar 25 16:31:32 2016 UTC (8 years, 2 months ago) by mestre
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0
Changes since 1.62: +6 -9 lines
Diff to previous 1.62 (colored)

- Both checks for pw are not needed since it was already done at the start of
the program
- Add error message to syslog if privdrop didn't succeed and then exit
- Remove lint comments

OK beck@ after his suggestion and also looks good to jca@

Revision 1.62 / (download) - annotate - [select for diffs], Thu Dec 10 16:06:29 2015 UTC (8 years, 5 months ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.61: +6 -1 lines
Diff to previous 1.61 (colored)

tighten the pledge for spamd, from Ricardo Mestre <serial@helheim.mooo.com>
this loads the tls certificate files pre-pledge then does the bulk of the tls
setup goo pledged.

Revision 1.61 / (download) - annotate - [select for diffs], Tue Dec 8 03:21:09 2015 UTC (8 years, 5 months ago) by beck
Branch: MAIN
Changes since 1.60: +3 -5 lines
Diff to previous 1.60 (colored)

Initially pledge spamd
All the work done by Ricardo Mestre <serial@helheim.mooo.com> - Thanks.

Revision 1.60 / (download) - annotate - [select for diffs], Sun Nov 29 06:51:20 2015 UTC (8 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.59: +4 -1 lines
Diff to previous 1.59 (colored)

Document that the pfdev check for 63 is /dev/fd/ only contains those nodes

Revision 1.59 / (download) - annotate - [select for diffs], Mon May 18 16:04:21 2015 UTC (9 years ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.58: +1 -81 lines
Diff to previous 1.58 (colored)

Change spamd to use divert-to instead of rdr-to.

divert-to has many advantages over rdr-to for proxies.  For example,
it is much easier to use, requires less code, does not depend on
/dev/pf, works in-band without the asynchronous lookup (DIOCNATLOOK
ioctl), saves us from additional port allocations by the rdr/NAT code,
and even avoids potential collisions and race conditions that could
theoretically happen with the lookup.

Heads up: users will have to update their spamd PF rules from rdr-to
to divert-to.  spamd now also listens to 127.0.0.1 instead of "any"
(0.0.0.0) by default which should be fine with most setups but has to
be considered for some special configurations.

Based on a diff is almost two years old but got delayed several times
... beck@: "now is the time to get it in" :)

Tested by many
With help from okan@
OK okan@ beck@ millert@

Revision 1.58 / (download) - annotate - [select for diffs], Tue Jan 13 21:42:59 2015 UTC (9 years, 4 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.57: +10 -9 lines
Diff to previous 1.57 (colored)

Use address-family specific lists of addr/mask entries instead of
a union that can store either ipv4 or ipv6.  The old method used
4x as much memory as was really needed for ipv4.  The spamd-setup
protocol has changed from: tag;message;a/m;a/m;a/m...\n
to :tag;message;af;count;a/m;a/m;a/m...[af;count;a/m;a/m;a/m]\n
OK phessler@ "nice" beck@

Revision 1.57 / (download) - annotate - [select for diffs], Sun Nov 23 21:19:47 2014 UTC (9 years, 6 months ago) by guenther
Branch: MAIN
Changes since 1.56: +1 -4 lines
Diff to previous 1.56 (colored)

Delete a bunch of unnecessary #includes
Use <fcntl.h> instead of <sys/{file,fcntl}.h>

ok krw@

Revision 1.56 / (download) - annotate - [select for diffs], Thu Oct 9 02:43:43 2014 UTC (9 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.55: +6 -6 lines
Diff to previous 1.55 (colored)

obvious reallocarray() conversions

Revision 1.55 / (download) - annotate - [select for diffs], Wed Nov 27 21:25:25 2013 UTC (10 years, 6 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6, OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.54: +4 -4 lines
Diff to previous 1.54 (colored)

unsigned char for ctype
ok okan kettenis

Revision 1.54 / (download) - annotate - [select for diffs], Tue Nov 19 18:33:57 2013 UTC (10 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.53: +21 -2 lines
Diff to previous 1.53 (colored)

add a bunch of missing prototypes
ok beck phessler

Revision 1.53 / (download) - annotate - [select for diffs], Wed Aug 21 16:13:29 2013 UTC (10 years, 9 months ago) by millert
Branch: MAIN
Changes since 1.52: +22 -21 lines
Diff to previous 1.52 (colored)

Remove the use of time_t in the greylist db file and use int64_t instead
with backwards compatibility for records with 32-bit times.
OK deraadt@ beck@

Revision 1.52 / (download) - annotate - [select for diffs], Tue Oct 2 15:26:17 2012 UTC (11 years, 8 months ago) by okan
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4, OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.51: +1 -75 lines
Diff to previous 1.51 (colored)

while it's of little harm, it's also been 5.5 years (and 8 releases),
remove the db conversion from BTREE to HASH.

ok beck@

Revision 1.51 / (download) - annotate - [select for diffs], Thu Mar 3 21:58:58 2011 UTC (13 years, 3 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.50: +2 -2 lines
Diff to previous 1.50 (colored)

repair arguments passed to pfctl; PR 6142, ok beck

Revision 1.50 / (download) - annotate - [select for diffs], Wed Oct 6 09:38:02 2010 UTC (13 years, 7 months ago) by stephan
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.49: +11 -7 lines
Diff to previous 1.49 (colored)

do not pass GREY entries to pf's spamd-white table if already TRAPPED.
Fixes pr/6467. (from boudewijn at indes dot com) - ok beck@

Revision 1.49 / (download) - annotate - [select for diffs], Mon Jan 11 10:00:22 2010 UTC (14 years, 4 months ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.48: +5 -5 lines
Diff to previous 1.48 (colored)

KNF

Revision 1.48 / (download) - annotate - [select for diffs], Thu Nov 12 04:08:46 2009 UTC (14 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.47: +3 -3 lines
Diff to previous 1.47 (colored)

malloc() after line length check, to avoid memory leak; ok tedu

Revision 1.47 / (download) - annotate - [select for diffs], Mon Apr 20 17:42:21 2009 UTC (15 years, 1 month ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6
Changes since 1.46: +16 -5 lines
Diff to previous 1.46 (colored)


PR 6090 - from Olli Hauer <ohauer@gmx.de>

A number of small improvements:

- patch for empty lines and comments in alloweddomains_file
- remove some whitespaces at end of line.
- document comment and empty line handling
- Remove unused parameter 'r' from getopt in spamd.c, it is removed in the 'switch statement'
  but not in getopt.
  http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/spamd/spamd.c.diff?r1=1.94;r2=1.95;f=h
- replace atoi with strtonum
- make debug output more usefull, display only what will be synced and not a second
  message which prints always "sync trapped %s"

- some cosemtic and whitespace fixes.

Revision 1.46 / (download) - annotate - [select for diffs], Wed Feb 25 19:00:36 2009 UTC (15 years, 3 months ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_4_5_BASE, OPENBSD_4_5
Changes since 1.45: +10 -3 lines
Diff to previous 1.45 (colored)

fix slow memory leak, spotted by Max Laier and Artis Caune
ok deraadt@, oga@, otto@

Revision 1.45 / (download) - annotate - [select for diffs], Sun Dec 7 21:12:52 2008 UTC (15 years, 5 months ago) by cloder
Branch: MAIN
Changes since 1.44: +2 -2 lines
Diff to previous 1.44 (colored)

time_t is signed, so use INT_MAX rather than UINT_MAX when parsing a time_t
with strtonum

Revision 1.44 / (download) - annotate - [select for diffs], Tue Aug 26 22:49:09 2008 UTC (15 years, 9 months ago) by jsg
Branch: MAIN
Changes since 1.43: +2 -2 lines
Diff to previous 1.43 (colored)

Fix an if (); typo. ok beck@

Revision 1.43 / (download) - annotate - [select for diffs], Fri Jul 11 14:53:32 2008 UTC (15 years, 10 months ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.42: +5 -2 lines
Diff to previous 1.42 (colored)

write a syslog debug message when a new GREY or TRAPPED entry is added
to the database.

ok beck@

Revision 1.42 / (download) - annotate - [select for diffs], Fri Jul 11 01:40:50 2008 UTC (15 years, 10 months ago) by phessler
Branch: MAIN
Changes since 1.41: +2 -1 lines
Diff to previous 1.41 (colored)

greyreader() shouldn't return, so tell us if it does

ok beck@, reyk@

Revision 1.41 / (download) - annotate - [select for diffs], Sat Nov 3 19:16:07 2007 UTC (16 years, 7 months ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.40: +7 -6 lines
Diff to previous 1.40 (colored)



PR 5621 - spamd doesn't clear the last entry from an empty TRAP list,
noticed and patch from Piotr Sikora <piotr@sikora.nu>

Revision 1.40 / (download) - annotate - [select for diffs], Thu Aug 16 04:42:16 2007 UTC (16 years, 9 months ago) by ray
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2
Changes since 1.39: +7 -7 lines
Diff to previous 1.39 (colored)

- Don't fill spamd debug with bogus config errors if there are no
  traps.
- Change count to size_t to avoid a size_t -> int conversion.
- Since configure_spamd always returns 0, change to void.
- Since configure_spamd now returns void, remove unreachable logging
  statement.

OK ckuethe and deraadt, initial diff from fgsch@ and OKed by beck.

Revision 1.39 / (download) - annotate - [select for diffs], Sun Mar 18 18:38:57 2007 UTC (17 years, 2 months ago) by beck
Branch: MAIN
Changes since 1.38: +3 -1 lines
Diff to previous 1.38 (colored)

Be sure to exit if the db_open of the second db for conversion fails.

Revision 1.38 / (download) - annotate - [select for diffs], Fri Mar 16 01:03:04 2007 UTC (17 years, 2 months ago) by beck
Branch: MAIN
Changes since 1.37: +25 -3 lines
Diff to previous 1.37 (colored)

now that we leave the grey, avoid annoying re-adds of white entries
by checking for them being in the db first.
ok millert@

Revision 1.37 / (download) - annotate - [select for diffs], Wed Mar 14 19:39:55 2007 UTC (17 years, 2 months ago) by beck
Branch: MAIN
Changes since 1.36: +6 -2 lines
Diff to previous 1.36 (colored)

when using low prio MX trapping, ignore hosts connecting to the low prio
mx for the first minute, to avoid problems if hosts legitimately try it
after we are down.
suggested by millert@

Revision 1.36 / (download) - annotate - [select for diffs], Wed Mar 14 19:13:35 2007 UTC (17 years, 2 months ago) by beck
Branch: MAIN
Changes since 1.35: +1 -6 lines
Diff to previous 1.35 (colored)

Don't delete grey entries when whitelisting. They expire anyway
and this hides the evidence. Avoids a potential race when
using -M traps where a retry comes in between deletion and
whitelisting.
ok millert@

Revision 1.35 / (download) - annotate - [select for diffs], Mon Mar 12 03:14:44 2007 UTC (17 years, 2 months ago) by beck
Branch: MAIN
Changes since 1.34: +3 -1 lines
Diff to previous 1.34 (colored)

log when we trap a host.

Revision 1.34 / (download) - annotate - [select for diffs], Tue Mar 6 23:38:36 2007 UTC (17 years, 3 months ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_4_1_BASE, OPENBSD_4_1
Changes since 1.33: +115 -14 lines
Diff to previous 1.33 (colored)

Add -M option to specify a local address that is a lower priority MX
address than the primary one. spamd will trap hosts that contact this
address first without first contacting the primary.
- get it in, deraadt@

Revision 1.33 / (download) - annotate - [select for diffs], Mon Mar 5 15:09:01 2007 UTC (17 years, 3 months ago) by beck
Branch: MAIN
Changes since 1.32: +2 -1 lines
Diff to previous 1.32 (colored)

don't make everything a sync once we see one, reset this once
we save the entry.
ok reyk@

Revision 1.32 / (download) - annotate - [select for diffs], Mon Mar 5 02:10:46 2007 UTC (17 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.31: +4 -4 lines
Diff to previous 1.31 (colored)

spacing

Revision 1.31 / (download) - annotate - [select for diffs], Sun Mar 4 03:24:47 2007 UTC (17 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.30: +29 -26 lines
Diff to previous 1.30 (colored)

bob writes some of the most horrid space and tab riddled messy code around

Revision 1.30 / (download) - annotate - [select for diffs], Sun Mar 4 03:19:41 2007 UTC (17 years, 3 months ago) by beck
Branch: MAIN
Changes since 1.29: +136 -4 lines
Diff to previous 1.29 (colored)


Database synchronizaton for spamd/spamlogd

This adds an HMAC protected synchronization protocol for use by spamd and
spamlogd.

- spamd can receive updates from other hosts for GREY, WHITE, and TRAPPED db
entries, and will update the local /var/db/spamd accordingly.

- spamd can send updates when it makes changes to the GREY or TRAPPED
entries in the db to other hosts running spamd. (Note it does not send
WHITE entries because the other spamd will see the GREY changes and have
complete information to make appropritate decisions)

- spamlogd can send updates for WHITE db entries that it performs on the local
db to other hosts running spamd, which will then apply them on remote hosts.

note that while this diff provides synchronization for changes made to the
spamd db by the daemons, it does *not* provide for sychonizing changes
to the spamd db made manually with the spamdb command.

Synchronization protocol and most of the work by reyk@,
with a bunch of the spamd, and spamlogd stuff by me.

testing mostly at the U of A, running happily there under big load.

ok reyk@ jmc@

Revision 1.29 / (download) - annotate - [select for diffs], Fri Feb 23 22:40:50 2007 UTC (17 years, 3 months ago) by beck
Branch: MAIN
Changes since 1.28: +19 -11 lines
Diff to previous 1.28 (colored)

Make spamd include the HELO/EHLO identification string sent by
the connecting hosts in the tuple key when greylisting. catches
a few more bogus hosts and will let us trap based on HELO later.

Changes spamdb(8) output to include the new field.

ok deraadt@, jmc@

Revision 1.28 / (download) - annotate - [select for diffs], Fri Feb 23 19:45:08 2007 UTC (17 years, 3 months ago) by beck
Branch: MAIN
Changes since 1.27: +12 -8 lines
Diff to previous 1.27 (colored)

make dequotetolower use regular string functions instead of the manual
walk with mutiple conditions in the loop.
ok deraadt@

Revision 1.27 / (download) - annotate - [select for diffs], Fri Feb 23 19:36:23 2007 UTC (17 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.26: +1 -2 lines
Diff to previous 1.26 (colored)

continue collecting lint to be sold as a parsley substitute; ok beck

Revision 1.26 / (download) - annotate - [select for diffs], Fri Feb 23 19:28:39 2007 UTC (17 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.25: +6 -6 lines
Diff to previous 1.25 (colored)

spacing

Revision 1.25 / (download) - annotate - [select for diffs], Fri Feb 23 19:22:07 2007 UTC (17 years, 3 months ago) by beck
Branch: MAIN
Changes since 1.24: +122 -34 lines
Diff to previous 1.24 (colored)

greytrapping improvements
	1) remove requirement for <> around spamtrap addresses
	2) add support for /etc/spamd/alloweddomains to specify
	   suffixes for which any destinations that don't match
	   get trapped

	various knf's by theo, feedback from jmc, millert, deraadt

Revision 1.24 / (download) - annotate - [select for diffs], Thu Jan 4 21:41:37 2007 UTC (17 years, 5 months ago) by beck
Branch: MAIN
Changes since 1.23: +259 -70 lines
Diff to previous 1.23 (colored)

        Using DB_BTREE for spamd is wrong, order is never required
and the rebalancing really slags big databases. Make spamd use DB_HASH
instead, and convert if the old type is noticed on startup.

Testing by me, djm, ian, others
ok deraadt@, millert@, djm@

Revision 1.23 / (download) - annotate - [select for diffs], Thu Dec 7 21:10:41 2006 UTC (17 years, 5 months ago) by otto
Branch: MAIN
Changes since 1.22: +11 -3 lines
Diff to previous 1.22 (colored)

check exit status of the pfctl command executed. ok beck@

Revision 1.22 / (download) - annotate - [select for diffs], Sun May 15 17:11:14 2005 UTC (19 years ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_4_0_BASE, OPENBSD_4_0, OPENBSD_3_9_BASE, OPENBSD_3_9, OPENBSD_3_8_BASE, OPENBSD_3_8
Changes since 1.21: +3 -3 lines
Diff to previous 1.21 (colored)

move db->close to not hold this lock unnecssarily during long protracted
operations. ok millert@ ages ago.

Revision 1.21 / (download) - annotate - [select for diffs], Sat Mar 12 00:02:07 2005 UTC (19 years, 2 months ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE, OPENBSD_3_7
Changes since 1.20: +2 -2 lines
Diff to previous 1.20 (colored)

asprintf in place of strdup really is kind of lame
ok millert@

Revision 1.20 / (download) - annotate - [select for diffs], Fri Mar 11 23:09:52 2005 UTC (19 years, 2 months ago) by beck
Branch: MAIN
Changes since 1.19: +161 -38 lines
Diff to previous 1.19 (colored)

"Greytrapping" for spamd - allow for spamd greylisting to maintain
a list of spamtrap destination addresses in the spamd database. When
a spamtrap address gets an attempted greylist delivery, blacklist the
offending host for a day. Does not affect hosts already whitelisted.

ok deraadt@, jmc@, dhartmei@ to get it in so it can be whacked on

Revision 1.19 / (download) - annotate - [select for diffs], Sat Dec 4 00:24:42 2004 UTC (19 years, 6 months ago) by moritz
Branch: MAIN
Changes since 1.18: +17 -8 lines
Diff to previous 1.18 (colored)

fix a signal race which could kill unrelated processes.
signal handler could be interrupted by another instance
of itself because it was used for multiple signals and
only one signal was blocked.
ok beck@ henning@

Revision 1.18 / (download) - annotate - [select for diffs], Wed Sep 15 00:46:46 2004 UTC (19 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.17: +2 -1 lines
Diff to previous 1.17 (colored)

ARGSUSED before signal handler with unused signo

Revision 1.17 / (download) - annotate - [select for diffs], Sun Aug 15 21:49:45 2004 UTC (19 years, 9 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE, OPENBSD_3_6
Changes since 1.16: +2 -2 lines
Diff to previous 1.16 (colored)

Expire entries that exactly match the time now in addition to ones
with an expire time in the past.  From beck@, OK deraadt@

Revision 1.16 / (download) - annotate - [select for diffs], Sun Aug 8 19:32:45 2004 UTC (19 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.15: +4 -4 lines
Diff to previous 1.15 (colored)

spacing

Revision 1.15 / (download) - annotate - [select for diffs], Sun Jul 4 22:46:47 2004 UTC (19 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.14: +7 -3 lines
Diff to previous 1.14 (colored)

two missing freeaddrinfo() -- leak; andrushock@korovino.net

Revision 1.14 / (download) - annotate - [select for diffs], Mon Jun 21 17:07:01 2004 UTC (19 years, 11 months ago) by itojun
Branch: MAIN
Changes since 1.13: +3 -1 lines
Diff to previous 1.13 (colored)

restrict address resolution to AF_INET for now

Revision 1.13 / (download) - annotate - [select for diffs], Mon Jun 21 17:05:43 2004 UTC (19 years, 11 months ago) by itojun
Branch: MAIN
Changes since 1.12: +19 -10 lines
Diff to previous 1.12 (colored)

use getaddr/nameinfo for address resolution.  beck, henning ok

Revision 1.12 / (download) - annotate - [select for diffs], Sat Mar 13 17:46:15 2004 UTC (20 years, 2 months ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE, OPENBSD_3_5
Changes since 1.11: +47 -18 lines
Diff to previous 1.11 (colored)

Add signal handler to parent, so that when greylisting we don't need to
kill all three processes to make it go away. Adjust daemon() call and
logging appropriately.
ok henning@, millert@

Revision 1.11 / (download) - annotate - [select for diffs], Thu Mar 11 17:48:59 2004 UTC (20 years, 2 months ago) by millert
Branch: MAIN
Changes since 1.10: +1 -3 lines
Diff to previous 1.10 (colored)

Remove sync() calls that immediately precede databse close().  Since
close() calls sync() itself the standalone sync() is a no-op.  OK beck@

Revision 1.10 / (download) - annotate - [select for diffs], Thu Mar 11 17:29:50 2004 UTC (20 years, 2 months ago) by beck
Branch: MAIN
Changes since 1.9: +16 -5 lines
Diff to previous 1.9 (colored)

Call db-sync() after each db modification since they aren't all that
frequent in the scheme of things and this avoids the possibility
of database corruption. Run here for a week.
ok millert@ deraadt@

Revision 1.9 / (download) - annotate - [select for diffs], Wed Mar 10 00:33:56 2004 UTC (20 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.8: +3 -3 lines
Diff to previous 1.8 (colored)

spaces

Revision 1.8 / (download) - annotate - [select for diffs], Fri Mar 5 00:31:05 2004 UTC (20 years, 3 months ago) by beck
Branch: MAIN
Changes since 1.7: +17 -5 lines
Diff to previous 1.7 (colored)

Fix really dumb memory leak that would have long runnign large whitelist
servers having their pf update process growing massive as it leaked
huge tracks of whitelist.
ok millert@

Revision 1.7 / (download) - annotate - [select for diffs], Mon Mar 1 17:03:10 2004 UTC (20 years, 3 months ago) by otto
Branch: MAIN
Changes since 1.6: +19 -49 lines
Diff to previous 1.6 (colored)

uset inet_pton(3) instead of home grown address validator; some other cleanup
ok beck@

Revision 1.6 / (download) - annotate - [select for diffs], Sat Feb 28 00:03:59 2004 UTC (20 years, 3 months ago) by beck
Branch: MAIN
Changes since 1.5: +48 -30 lines
Diff to previous 1.5 (colored)

- ensure greylist entry expiry is not updated until actually whitelisted
  to avoid keeping multiple grey entries around from a single host for
  extra time.
- make -G work
- paranoia and cleanup suggestions from deraadt@
ok millert@

Revision 1.5 / (download) - annotate - [select for diffs], Thu Feb 26 08:52:58 2004 UTC (20 years, 3 months ago) by beck
Branch: MAIN
Changes since 1.4: +3 -2 lines
Diff to previous 1.4 (colored)

don't leak one here either.

Revision 1.4 / (download) - annotate - [select for diffs], Thu Feb 26 08:50:40 2004 UTC (20 years, 3 months ago) by beck
Branch: MAIN
Changes since 1.3: +5 -4 lines
Diff to previous 1.3 (colored)

don't leak an fd here.

Revision 1.3 / (download) - annotate - [select for diffs], Thu Feb 26 08:18:56 2004 UTC (20 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.2: +21 -8 lines
Diff to previous 1.2 (colored)

paranoia; beck ok

Revision 1.2 / (download) - annotate - [select for diffs], Thu Feb 26 07:38:44 2004 UTC (20 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.1: +4 -4 lines
Diff to previous 1.1 (colored)

spaces

Revision 1.1 / (download) - annotate - [select for diffs], Thu Feb 26 07:28:55 2004 UTC (20 years, 3 months ago) by beck
Branch: MAIN

Add -g option for greylisting support for spamd. The greylisting techinque
originates from a paper by Evan Harris which can be found at
http://projects.puremagic.com/greylisting/. This implementation makes
spamd allow for non-blacklisted addresses to be treated as "greylisted".
where they are tracked in a db file, and whitelisted by addition to a
pf table when the same envelope from and to are retried from the same
source IP address. Testing by many, ok deraadt@

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.