forked from qmail/simscan
-
Notifications
You must be signed in to change notification settings - Fork 1
/
ChangeLog
430 lines (351 loc) · 17.8 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
27/01/2024 version 1.4.3 Roberto Puzzanghera
- fixed several compilation warnings
- fixed several autotools warnings
06/12/2023 Roberto Puzzanghera
- added jms "debug" patch, to improve the debugging of simscan on
qmail-smtpd log;
- bug fix by Bob Greco where a received message with multiple
'local' recipients executes spamc as null user and not as the
user extracted from the first local recipient.
- added Roberto Puzzanghera's attachments-size-limit patch, which allows
you to overcome a limitation where simscan doesn't pass messages
over 250k to spamassassin. This patch let the administrator set
the attachments' size limit in bytes by setting the
qmail/control/simsizelimit file. Furthermore, events where simscan
is not activated are now logged at smtpd level (it was logged
only when debug is active).
01/23/2014 Johannes Weberhofer
- Removed empty INSTALL file, added .gitattributes
- renamed configure.in and fixed it to work with newer automake
01/22/2014 Johannes Weberhofer
- Fixed issue in combination with a ripmime-problem as described
in http://permalink.gmane.org/gmane.mail.qmail.simscan/3880
(Thanks to Gustavo Castro)
30/05/2013 Johannes Weberhofer
- Added GPL license version 2.0
- Made several changes to allow building on with strict compiler
settings
- Removed .cvsignore file and added .gitignore file
- Do no longer check for existing clamav-database when set via
--enable-clamavdb-path
- added missing permissions S_IRUSR | S_IWUSR to open()
12/12/09 Jason Frisvold
- Make simscan aware of clamav cld files (Thanks Bob Maple)
- Fix ripmime working directory (Thanks Gladiston Justini)
03/21/08 Jason Frisvold
- Fix --enable-dpsam-args (Thanks Jean-Daniel Bonnetot)
- Prevent double virus scanning (Thanks Gerard Earley)
- Fix retrieval of SpamHits and ReqHits (Thanks anonymous)
- Add SpamAssassin's ReqHits to log line (Thanks anonymous)
- Add SPAM PASS log line (Thanks anonymous)
11/12/07 Jason Frisvold
- Improvement patch (Tom Collins)
- - Clamdscan scans the message file instead of the message file and
- attachment
- - Don't pass messages over 250k to spamassassin
- - Spam scanning before virus scanning
- - Lowercase FROM and TO addresses
- - write spam_fd before calling is_spam()
- - fix str_rstr() call to require complete match
10/30/07 Jason Frisvold
- simscan directory umask fix (John Simpson)
- band-aid simscanmk NFS timing issue on solaris - Tom Collins
- strsep bug in Solaris - Tom Collins
- set exit code on errors - Jeremy Kister
- fix compile warning issues with long versus int - Jeremy Kister
- add pid to debug messages - Jeremy Kister
- RFC2822 Received field compliance - Tullio Andreatta
10/29/07 Jason Frisvold
- Support daily and main .inc and .cvd files (John Simpson)
- Fixed a few compiler warnings (Jason Frisvold)
- simcontrol lookups should be lowercase (Jason Frisvold)
- lowercase all strings in the simcontrol.cdb file (Jason Frisvold)
10/29/07 Ken Jones
- release version 1.4.0 with p0f code moved to qmail-smtpd
03/11/07 Ken Jones
- for dspam only authorized users can send email to spam@ and nospam@,
includes support for custom smtp error message
05/18/06 George Breahna
- first version of DSPAM support
R
- add u_char casting to isupper and tolower
01/07/06 Ken Jones
- envoke ripmime with --disable-qmail-bounce
01/07/06 Ken Jones
- reject blank envelopes with proper error
10/05/05 Ken Jones
- found an IsSpam=1.0 instead of IsSpam==1
for the spam passthru setting
10/04/05 Ken Jones
- virus drop message was not exiting at the right time.
Found by Russ Lists
- use per domain hit count on spam log message if set.
- if read from standard in fails the temp file was not
closed so the temporary work directory would not
be removed.
09/30/05 Ken Jones
- put 's' at the end of processing time and
move to after status.
- add RELAYCLIENT log line. suggested by Sim
- replace --with-pcre with two new ones
--with-pcre-lib --with-pcre-include
- update configure regex section to report the
two new --with-pcre lines
- A value of 5 was being checked instead of
the SPAM_HITS value. Found by Jeremy Kister.
- Change SpamHits > to SpamHits >=
09/28/05 Ken Jones
- update logging documentation on qmailwiki.org
- add VIRUS DROPPED logging message
- clearer --enable-spam-auth-user config message
- put #ifdef ENABLE_SPAM around the spam processing
section in per_domain_lookup() function
Reported by Gerad Earley
- Change received header printf to %d for compiler warnings
- add SPAM DROPPED log message
- add processing time field to logging
- add spam score and required hits to logging
09/27/05 Ken Jones
- New global IsSpam flag
- rewrite is_spam() to assume one line per invocation
- rewrite check_spam() to use FILE and fgets to call
is_spam with one line per invocation
- Use IsSpam flag instead of over loaded SpamHits=1.0
to determine if email is spam. This also returns
a valid spam hit count in custom smtp error message
- move definition of qmail_queue outside per domain ifdef
- new configure option --enable-spam-auth-user default to
not scan authenticated users with spamassasin
- update copyright year
- add standarized reporting line for attachment and regex
rejects
09/27/05 Bruno Negrao
- in per domain processing an attachment list should override
the global attachment list
02/08/05 Tom Collins
- simscan.c do not spam scan for RELAYCLIENT users
- complier warnings for getpid(),getppid()
02/06/05 Itamar Reis Peixoto
- rc.spamd sample init script change to remove clamd with spamd
- rc.qmail same change to this init script sample
02/02/05 Ken Jones
- 1.1 release
01/26/05 Alex Pleiner
- clean up for addr parse bug and per domain pass through debug
01/21/05 Flavio Curti
- spam passthru change in how it returns a value
Daniel Maglione
- spam passthru log changes
11/30/04 Ken Jones / Tren Blackburn
- add --enable-controldir option for over riding the default
location for simscan control files. Default: /var/qmail/control
11/24/05 Daniel Maglione
- change logging message for per domain spam pass thru
11/24/04 Ken Jones
- strsep code if system does not support strsep: solaris
- change int fd to static int fd in main for warning
- change %d to %ld for getpid value warning
- set HAS_ULIMIT_NPROC on all systems except solaris
- ifdef around ulimit setting
11/22/04 Daniel Maglione
- support for spam passthru in per domain code
11/20/04 Flavio Curti
- support for regex matching on per domain basis
--enable-regex
--with-pcre=/prefix/of/pcre
- change strtok to strsep
11/17/04 Ken Jones
- clamav does not enable ripmime by default
- clean up configure option report
- attempt to auto detect spamassassin path with received header
and spam processsing enabled
11/17/04 Flavio Curti / Ken Jones
- add /usr/bin/sigtool and /var/lib/clamav to auto detect paths
for received header processing
11/16/04 Ken Jones
- configure attempts to auto detect where clamavdb and sigtool are
- add -v version switch to simscan
11/15/04 Ken Jones
- re-do rcpt to handling for unlimited rcpt to's.
11/10/04 Ken Jones
- attachment checking should be case insensitive
- do not check . and .. directory entries on attachments
- "single character".exe would not match .exe attachment
11/09/04 Flavio Curti / Ken Jones
- with per domain, disable spam/clam/trophie by default
11/08/04 Ken Jones
- changed while loop to for loop and boundary check on
processing RcptTo array.
11/08/04 Jason Frisvold / Niek
- fix drop message code when not enabled
11/05/04 Daniel Maglione
- set system fork limits high to overcome fork process limits on
heavily loaded systems
- new --enable-quarantinedir=DIR option to allow for quarantine
of messages for later processing
- new -enable-dropmsg option to accept email and silently drop
viruses and spam emails.
11/04/04 Dmitriy MiksIr / Ken Jones
- allow disabling ripmime in configure script --disable-ripmime
even if virus scanning is selected
- allow disabling ripmime in simscan based on configure script
- Makefile: set mode on simscan binary after setting ownership
10/30/04 Flavio Curti
- fixes the version grabber with spamassassin 3.0
10/29/04 Ken Jones
- Update README on how to list attachments
10/28/04 Flavio Curti
- simscanmk has new -g option to build the version database
for the new received header option
- if you enable per domain and use attach= and have other options after
attach= those would have been ignored, this is fixed.
- log format update, no more spaces between the different
rcpts, and if received is enabled the run-time gets added as well at
the end (time: )
- the way the injection into qmail-queue works has changed. in any
case. it does work the same way as before.
- optionally add a received header with version information
--enable-received=y|n
Simscan adds a Received line, showing the runtime, and a version
string of the scanners that checked the message:
Received: by simscan 1.0.6 ppid: 25399, pid: 25400, t: 4.7007s
scanners: attach: 1.0.6 clamav: 0.80/m:27/d:556
trophie: 7.000-1011/218/74141 spam: 2.63
- new options for --enable-received option
--enable-spamassassin-path=PATH Path to the spamassassin binary
--enable-clamavdb-path=PATH Directory where the clamav
master.cvd and daily.cvd files are saved
--enable-sigtool-path=PATH Path to the sigtool binary
--enable-trophie-path=PATH (if trophie is used)
These are used to build the version database information
- configure.in needs to use ENABLE_SPAMC_ARGS on info line
10/28/04 Ken Jones
- Makefile.am simscanmk.o needed to depend on config.h
- have ENABLE_SPAM 1 instead of just ENABLE_SPAM
- have ENABLE_TROPHIE 1 instead of just ENABLE_TROPHIE
10/27/04 Kiril Todorov / Ken Jones
- fix configure.in syntax error on --enable-spamc-args
- configure --help should show --enable-spam-passthru
10/27/04 Niek / Ken Jones
- remove un-needed "./" clamdscan argument
10/26/04 Eduardo M. Bragatto / Ken Jones
- Do not use per user spamc option if more than one
receipient.
10/26/04 Jason Frisvold
- more comprehensive readme documentation
10/23/04 Ken Jones / Jason Frisvold
- added --enable-spamc-args to set spamc args during configure
instead of having to edit simscan.c
- added --enable-spamc-user to set the -u user@domain option
to spamc
10/22/04 Ken Jones
- added --enable-spam-passthru feature to allow email to run
through spamassassin and then passed through to the user
- fix another line in spam header parsing code from 10/21/04
10/21/04 Jason Frisvold / Ken Jones
- support for spamassassin 3 default setup use "score=" instead
of "hits="
- do not die if either one of the above is not found. Added
debug statement when not found.
10/21/04 Jason Frisvold
- add support for spam hit count in simcontrol file, for example:
:spam=yes,clam=yes,spam_hits=32.5
- a bunch of additional debugging printouts
10/19/04 Flavio Curti / Ken Jones
- call ripmime if either attachment blocking or clamav is enabled
- modifications to configure.in to support the above
10/17/04 Flavio Curti
- Trophie can be enabled/disabled in the per_domain_file (trophie=)
- attachments can be handled by the per_domain_file
attach=listof files separated by colons
- per_domain checks now sender and all reciepients
- per_domain handles now qmail extensions,
read the README on how it works
- debug messages so they get only displayed with a debuglevel > 1
10/16/04 Flavio Curti
- support for trophie http://www.vanja.com/tools/
an interface to Trend Micro virus scanner
- when SIMSCAN_DEBUG is set do not delete the work files
10/16/05 Ken Jones
- Allow group access to work directories so clamd can
access the work directories when clamd runs as clamav user
and added to simscan group
10/14/05 Ken Jones
- update reject message code to support file descriptor 4 in
the new qmail-queue-custom-error.patch version
- attachment reads /var/qmail/control/ssattach file now
- custom reject message for bad attachments
- log attachment rejections
- new RcptTo/MailFrom parsing code. The old stuff was broken.
- hardcoded /var/qmail paths now use QMAILDIR
10/13/04 Ken Jones / Jeremy Kitchen
- use SIMSCAN_DEBUG environment variable to enable error logging
- debug output now goes to stderr for logging
- Makefile.am: simscan.o needs to depend on config.h
- new --enable-custom-smtp-reject option to return an smtp reject
message with the virus name detected. Requires the contrib
directory qmail-queue-custom-error.patch patch to be applied
to the qmail source.
10/12/04 Ken Jones
- new log output format includes ip, virus name, to/from addresses
- read clamdscan's output to get virus name
- parse to/from addresses into global variable
10/08/04 Jeremy Kitchen
- removed extra paren in an if statement that would cause
compilation failures if debugging was enabled. tx Al Battrick
10/05/04 Version 1.0.5 (devel)
Jeremy Kitchen
- fixed bug in Makefile.am, thanks Bastiaan van der Put.
- fixed clamdscan exit code handling. *smacks Ken* :)
- changed check_scan to not close fd 1 and 2
- changed installation a little more.
- switching to CVS tree to make life easier.
10/04/04 Version 1.0.4 (devel)
Jeremy Kitchen
- changed Makefile.am to set proper permissions on simscan binary
- changed configure.in to better test for the simscan user
- added support for command line changing of simscan user
--enable-user=<user>
- changed Makefile.am to set the mode on the working directory to 700
09/14/04 Version 1.0.4 (devel)
Ken Jones / Jeremy Kitchen
- print to stderr when virus detected with IP address
Suggested by Rick Macdougall coded by Ken Jones
- make unique file names for the message, to/from headers and the
optional spamassassin output. These files get unlinked before
exec'ing the --enable-qmail-queue=PATH program. Configure defaults
this value to the real qmail-queue program.
data file name
____________ _______________
message fd 0 = msg.X.Y.Z where X = unix seconds
to/from fd 1 = addr.X.Y.Z Y = microseconds
spamassassin = spamc.msg.X.Y.Z Z = simscan process id
fd 0 and fd 1 normally come from the qmail smtp daemon.
Simcan can optionally be turned on or off for different
incoming IP ranges using the standard tcp.smtp.cdb file
used by tcpserver/qmail-smtpd with the -x option.
- spam-hits was checking only greater than the reported hits.
It should check for greater than or equal to.
Ken Jones
- updated INSTALL, README and ChangeLog documentation.
- fstat works on pipes, so switched per-domain code to allocate
memory for the envelope with one read and one write instead of
a read/write per character of the envelope.
09/13/04 Version 1.0.3 (devel)
Ken Jones
- The --enable-spam option now checks for an X-Spam-Flag: YES header.
If found it returns a permenent refusal to accept message. The error
code translates to an SMTP 500 series message refusal.
- The --enable-spam-hits=hit_number option combinded with the
--enable-spam option the perment refusal is based on the calculated
hit: value in the X-Spam-Status: header. This option allows a
system administrator to refuse email that has a fairly high
hit count from spamassassin, like 10. Email that passes through
can then be scanned again with a users personal perferences.
09/11/04 Version 1.0.2 (devel)
Ken Jones
- Enable clamav or spamassassin per domain
- new simscanmk program to build clamav or spamasassing enable lists
07/20/04 Version 1.0 (production)
Ken Jones
- First production version