Subversion Repositories libspf2

Compare Revisions

Ignore whitespace Rev 76 → Rev 77

/branches/squeeze/debian/changelog
0,0 → 1,239
libspf2 (1.2.9-4) unstable; urgency=low
 
* Drop obsolete README.Debian-source; move non-obsolete info to
libspf2-dev.README.Debian.
* debian/libspf2.ver: Explicitly unhide certain special symbols that
became hidden on the mips and mipsel architectures but nowhere else,
causing a FTBFS.
 
-- Magnus Holmgren <holmgren@debian.org> Sat, 03 Oct 2009 21:29:19 +0200
 
libspf2 (1.2.9-3) unstable; urgency=high
 
* ipv6_buffer_miscalculation.dpatch: Fix an abort() caused by
miscalculating the size of an internal buffer when mail is received
over IPv6. Thanks to Matthias Scheler <tron@netbsd.org>.
 
-- Magnus Holmgren <holmgren@debian.org> Sun, 13 Sep 2009 20:23:22 +0200
 
libspf2 (1.2.9-2) unstable; urgency=low
 
* debian/rules: Correct version.
* 01_private_glib_functions.dpatch: Avoid linking private glibc
functions.
* Simplify debian/*.install and exclude the libtool .la file from the
-dev package. Set DEB_DH_INSTALL_SOURCEDIR accordingly.
* Add ${misc:Depends} to Depends.
* Add debug package.
* Use ld version script to hide internal symbols.
* Bump Standards-Version to 3.8.3.
 
-- Magnus Holmgren <holmgren@debian.org> Tue, 25 Aug 2009 00:15:01 +0200
 
libspf2 (1.2.9-1) unstable; urgency=high
 
* New upstream release.
- Drops non-dfsg Free IETF internet draft, so tarball no longer needs
repacking
+ Fixes exploitable buffer overflow (LP: #287534)
+ Multiple fixes for improved RFC 4408 compliance
+ Update libspf2-2.symbols for new symbol
+ 20_spf_dns_include_std_headers.dpatch: Updated.
* Thanks to Scott Kitterman.
 
-- Magnus Holmgren <holmgren@debian.org> Tue, 04 Nov 2008 21:14:31 +0100
 
libspf2 (1.2.8~dfsg-1) unstable; urgency=low
 
* Merge changes from Ubuntu.
* Fix and tweak library dependency information (shlibs as well as
symbols).
* Upgrade to Standards-Version: 3.8.0. Changes needed:
+ Add debian/README.source (§ 4.9).
* Bring debian/copyright a bit more up-to-date.
 
-- Magnus Holmgren <holmgren@debian.org> Sun, 02 Nov 2008 12:29:51 +0100
 
libspf2 (1.2.8~dfsg-0ubuntu1) intrepid; urgency=low
 
* New upstream release (LP: #283920)
- Fixes multiple memory leaks
- CVE2008-2469 buffer overflows
- Adds new documentation
- Drop all patches except 20_spf_dns_include_std_headers.dpatch (included
upstream)
- Freshen 20_spf_dns_include_std_headers.dpatch
- Update debian/rules for new release
* Repack tarball to remove non-DFSG Free IETF draft
* Added debian/libspf2-2.symbols and updated for new version
* Drop README.Debian since it no longer applies.
 
-- Scott Kitterman <scott@kitterman.com> Sun, 19 Oct 2008 01:00:13 -0400
 
libspf2 (1.2.5.dfsg-5) unstable; urgency=low
 
* 43_new_explanation_url.dpatch: Bring default explanation up to date by
referring to www.openspf.org instead of spf.pobox.com.
* Add spfquery(1) manpage.
* Fix format of copyright notice in debian/copyright.
* Move upstream homepage URL to the new Homepage control field, rename
VCS control fields, and update Standards-Version.
* A few cosmetic adjustments including fixing the indentation of the
1.2.5.dfsg-3 entry below (Closes: #465466).
* New maintainer email address.
 
-- Magnus Holmgren <holmgren@debian.org> Fri, 18 Apr 2008 17:51:28 +0200
 
libspf2 (1.2.5.dfsg-4) unstable; urgency=low
 
* Added 23_spfquery_ipv6.dpatch: Make spfquery accept IPv6 addresses
(Closes: #440147). Thanks to Matthias Cramer.
* 35_untabify_help.dpatch: Make --help output of utilities less ugly by
converting tabs to spaces.
 
-- Magnus Holmgren <magnus@kibibyte.se> Wed, 05 Sep 2007 15:39:22 +0200
 
libspf2 (1.2.5.dfsg-3) unstable; urgency=low
 
* 22_spfquery_fallback_segfault.dpatch: Fix fallback-related segfault in
spfquery (Closes: #430414). Thanks to Robert Millan.
* Correct debian/copyright (Closes: #433047). Thanks to Julian Mehnle.
* A second patch from Robert split into three:
* 40_permanent_include_errors.dpatch: Make permanent errors in
processing an include: directive cause the parent evaluation to return
a permanent error as well (Closes: #435139).
* 41_none_not_neutral.dpatch: Use a diffent explanation for
SPF_RESULT_NONE than the one for SPF_RESULT_NEUTRAL (Closes: #435140).
* 42_empty_sender.dpatch: Use the HELO identity in MAIL FROM checks if
the sender address has been set to the empty string (Closes: #431239).
* debian/control: Add XS-Vcs-* fields.
 
-- Magnus Holmgren <magnus@kibibyte.se> Wed, 22 Aug 2007 17:13:27 +0200
 
libspf2 (1.2.5.dfsg-2) unstable; urgency=low
 
* 21_spfquery_infininte_loop.dpatch: Fix infinite loop when giving
unimplemented options to spfquery.
* 20_printf_types.dpatch: Revert to using standard conversion specifiers
without z modifiers.
* debian/watch: mangle away .dfsg from package version.
* Lower spfquery and spfd alternatives priorities to 25.
* Skip applying 01_line-endings.dpatch; it's meaningless.
 
-- Magnus Holmgren <magnus@kibibyte.se> Wed, 06 Jun 2007 19:31:01 +0200
 
libspf2 (1.2.5.dfsg-1) unstable; urgency=low
 
* New maintainer (Closes: #372629).
* Repacked .orig.tar.gz without non-free IETF Internet Draft (Closes:
#393390).
* Merge updates from Ubuntu:
- Add debian/compat and Build-depend on debhelper >= 5.
- Add alternatives handling for /usr/bin/spfquery (Closes: #306875).
- Conflict on libmail-spf-query-perl << 1:1.999.1-3.
- Add postinst and prerm scripts.
- debian/copyright: update author address.
- debian/control: add final newline.
* debian/control:
* Change description of spfquery (Closes: #410592).
* Add homepage to package descriptions.
* Reduce Debian diff by changing line endings with sed instead.
* Further reduce Debian diff by eliminating config.sub and config.guess
from there. Build-depend on autotools-dev to ensure up-to-date
versions instead.
* The autogenerated spf_lib_version.h was put in the wrong directory,
while there was a static spf_lib_version.h in the right directory.
Fix that with some rules in debian/rules.
* Use dpatch to manage patches.
* Apply 20_64bit_types.dpatch to hopefully prevent segfaults on 64-bit
architectures (Closes: #392793). Thanks to Thomas Jacob, Carsten
Koch-Mauthe and Herbert Straub.
* 20_printf_types.dpatch: Change format strings to use the z flag,
meaning size_t, among other things.
* 30_spfd_check_unlink_failure.dpatch: Fix a typo in spfd (patch from
Thomas Jacob).
* debian/watch: added.
* Update Standards-Version to 3.7.2 without changes.
* Apply 20_spf_dns_include_std_headers.dpatch: Include arpa/nameser.h and
netdb.h from spf_dns.h instead of defining the constants needed unless
certain HAVE_ macros are defined (Closes: #405885).
* Apply 25_maxvals.dpatch, which brings certain processing limits (meant
to mitigate DoS attacks) in line with RFC 4408. Thanks to Scott
Kitterman.
* debian/control: Change libspf2-dev dependency to ${binary:Version} so
that binNMUs will work.
* Ship spfd in the spfquery package (Closes: #258360).
 
-- Magnus Holmgren <magnus@kibibyte.se> Sat, 24 Mar 2007 14:51:23 +0100
 
libspf2 (1.2.5-4) unstable; urgency=low
 
* Orphan.
 
-- Eric Dorland <eric@debian.org> Mon, 20 Nov 2006 02:16:20 -0500
 
libspf2 (1.2.5-3) unstable; urgency=low
 
* src/include/spf_server.h: Remove useless include to
spf_dns_internal.h. (Closes: #312145)
* debian/control: Have spfquery against libmail-spf-query-perl to work
around #306875, hopefully temporarily.
 
-- Eric Dorland <eric@debian.org> Sat, 30 Jul 2005 01:25:24 -0400
 
libspf2 (1.2.5-2) unstable; urgency=low
 
* The "Doh, missed a soname change" release.
* debian/libspf2-0.install: Rename to libspf2-2.install.
* debian/control:
- Change libspf2-0 to libspf2-2 to reflect soname change.
(Closes: #306205)
- Add spfquery package, don't package spfd for now, can't figure
out how to make it work. This partially addresses #258360.
* debian/spfquery.install: New file.
 
-- Eric Dorland <eric@debian.org> Mon, 25 Apr 2005 20:07:48 -0400
 
libspf2 (1.2.5-1) unstable; urgency=low
 
* New upstream release.
 
-- Eric Dorland <eric@debian.org> Sun, 17 Apr 2005 23:37:27 -0400
 
libspf2 (1.0.4-4) unstable; urgency=medium
 
* configure, aclocal.m4: Run aclocal and autoconf to get the right code
for the libtool test to use the pass_all method on arm. (Closes:
#276516)
* Urgency medium to get this bloody thing fixed already.
 
-- Eric Dorland <eric@debian.org> Fri, 26 Nov 2004 00:15:04 -0500
 
libspf2 (1.0.4-3) unstable; urgency=low
 
* config/ltmain.sh: Re-libtoolize again, hopefully this will fix arm
building.
 
-- Eric Dorland <eric@debian.org> Wed, 17 Nov 2004 13:50:50 -0500
 
libspf2 (1.0.4-2) unstable; urgency=low
 
* config/ltmain.sh: Re-libtoolize. (Closes: #269936)
* configure.ac: Apply patch from Kurt Roeckx to fix build on
amd64. (Closes: #262687)
* Rerun autoconf to apply the changes.
 
-- Eric Dorland <eric@debian.org> Mon, 6 Sep 2004 19:36:20 -0400
 
libspf2 (1.0.4-1) unstable; urgency=low
 
* New upstream release. (Closes: #261709)
 
-- Eric Dorland <eric@debian.org> Mon, 9 Aug 2004 00:57:49 -0400
 
libspf2 (1.0.3-1) unstable; urgency=low
 
* Initial release. (Closes: #257644)
-- Eric Dorland <eric@debian.org> Fri, 2 Jul 2004 00:00:19 -0400
 
/branches/squeeze/debian/libspf2.ver
0,0 → 1,13
{
global:
SPF_*;
main;
__libc_csu_*;
_init;
_fini;
_IO_stdin_used;
_DYNAMIC_LINKING;
__RLD_MAP;
local:
*;
};
/branches/squeeze/debian/libspf2-dev.README.Debian
0,0 → 1,11
libspf2 for Debian
------------------
 
Information and more recent versions of libspf2 are available from
 
http://www.libspf2.org/
 
Current SPF specifications can be found at
<http://www.openspf.org/Specifications>.
 
-- Magnus Holmgren <holmgren@debian.org>, Mon, 14 Sep 2009 22:33:12 +0200
/branches/squeeze/debian/patches/ipv6_buffer_miscalculation.dpatch
0,0 → 1,20
#! /bin/sh /usr/share/dpatch/dpatch-run
## ipv6_buffer_miscalculation.dpatch by Matthias Scheler <tron@netbsd.org>
##
## DP: Fix an abort() caused by miscalculating the size of an internal buffer.
## DP: This can crash applications using "libspf2" (e.g. "milter-greylist")
## DP: in an e-mail gets delivered via SMTP over IPv6 depending on the
## DP: remote machine's IPv6 address.
 
@DPATCH@
--- a/src/libspf2/spf_expand.c 2008-11-03 21:29:00.000000000 +0000
+++ b/src/libspf2/spf_expand.c 2009-09-08 11:27:52.000000000 +0100
@@ -245,7 +245,7 @@
case PARM_CLIENT_IP: /* SMTP client IP */
#ifdef COMPUTE
if (compute_length) {
- len = sizeof(ip6_buf);
+ len = sizeof(ip6_rbuf);
if (d->dv.url_encode)
len *= 3;
buflen += len;
/branches/squeeze/debian/patches/00list
0,0 → 1,3
01_private_glibc_functions
20_spf_dns_include_std_headers
ipv6_buffer_miscalculation
/branches/squeeze/debian/patches/01_private_glibc_functions.dpatch
0,0 → 1,45
#! /bin/sh /usr/share/dpatch/dpatch-run
## 01_private_glibc_functions.dpatch by Magnus Holmgren <holmgren@debian.org>
##
## DP: Avoid linking private glibc functions (specifically __ns_get16).
 
@DPATCH@
diff -urNad trunk~/configure.ac trunk/configure.ac
--- trunk~/configure.ac 2008-11-04 16:32:10.000000000 +0100
+++ trunk/configure.ac 2008-11-15 15:35:38.000000000 +0100
@@ -272,7 +272,8 @@
AC_CHECK_FUNCS([gethostbyname inet_ntoa select strrchr strstr strtol])
AC_REPLACE_FUNCS([getopt_long_only strncasecmp])
-AC_REPLACE_FUNCS([__ns_initparse __ns_name_uncompress __ns_get16 __ns_msg_getflag])
+AC_REPLACE_FUNCS([__ns_initparse __ns_name_uncompress __ns_msg_getflag])
+AC_LIBOBJ(__ns_get16)
AC_CONFIG_FILES([Makefile
Doxyfile
diff -urNad trunk~/configure trunk/configure
--- trunk~/configure 2008-11-04 16:32:56.000000000 +0100
+++ trunk/configure 2008-11-15 15:35:39.000000000 +0100
@@ -25752,8 +25752,7 @@
-
-for ac_func in __ns_initparse __ns_name_uncompress __ns_get16 __ns_msg_getflag
+for ac_func in __ns_initparse __ns_name_uncompress __ns_msg_getflag
do
as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
{ echo "$as_me:$LINENO: checking for $ac_func" >&5
@@ -25854,6 +25853,12 @@
done
+case " $LIBOBJS " in
+ *" __ns_get16.$ac_objext "* ) ;;
+ *) LIBOBJS="$LIBOBJS __ns_get16.$ac_objext"
+ ;;
+esac
+
ac_config_files="$ac_config_files Makefile Doxyfile src/Makefile src/include/Makefile src/libreplace/Makefile src/libspf2/Makefile src/spfquery/Makefile src/spftest/Makefile src/spfd/Makefile src/spf_example/Makefile"
Property changes:
Added: svn:executable
## -0,0 +1 ##
+*
\ No newline at end of property
Index: squeeze/debian/patches/20_spf_dns_include_std_headers.dpatch
===================================================================
--- squeeze/debian/patches/20_spf_dns_include_std_headers.dpatch (nonexistent)
+++ squeeze/debian/patches/20_spf_dns_include_std_headers.dpatch (revision 77)
@@ -0,0 +1,67 @@
+#! /bin/sh /usr/share/dpatch/dpatch-run
+## 20_spf_dns_include_std_headers.dpatch by Magnus Holmgren <magnus@kibibyte.se>
+##
+## All lines beginning with `## DP:' are a description of the patch.
+## DP: Include arpa/nameser.h and netdb.h from spf_dns.h instead of defining
+## DP: the constants needed unless certain HAVE_ macros are defined.
+## DP: Updated for libspf2 1.2.8/9 by Scott Kitterman <scott@kitterman.com>
+
+@DPATCH@
+diff -urNad libspf2-1.2.9~/src/include/spf_dns.h libspf2-1.2.9/src/include/spf_dns.h
+--- libspf2-1.2.9~/src/include/spf_dns.h 2008-10-27 12:27:14.000000000 -0400
++++ libspf2-1.2.9/src/include/spf_dns.h 2008-11-04 10:10:58.000000000 -0500
+@@ -63,48 +63,19 @@
+ *
+ */
+
++/* The following two header files might not exist on all platforms,
++ * but at least they exist on Debian with libc6.
++ */
++#include <arpa/nameser.h>
++#include <netdb.h>
+
+ /*
+- * For those who don't have <arpa/nameserv.h>
++ * Type 99 decl does not exist in Debian libc6 (not even 2.7)
+ */
+-
+-/* XXX This should use a more sensible define. */
+-#if !defined( HAVE_NS_TYPE )
+-
+-#define ns_t_invalid 0
+-#define ns_t_a 1
+-#define ns_t_ns 2
+-#define ns_t_cname 5
+-#define ns_t_ptr 12
+-#define ns_t_mx 15
+-#define ns_t_txt 16
+-#define ns_t_aaaa 28
+-/* #define ns_t_a6 38 */
+-#define ns_t_any 255 /**< Wildcard match. */
+-
+-typedef int ns_type;
+-#endif
+-
+ #if ! HAVE_DECL_NS_T_SPF
+ #define ns_t_spf 99
+ #endif
+
+-#if ! HAVE_DECL_NS_T_INVALID
+-#define ns_t_invalid 0
+-#endif
+-
+-
+-/*
+- * For those who don't have <netdb.h>
+- */
+-
+-#if !defined(HAVE_NETDB_H) && !defined(_WIN32)
+-#define NETDB_SUCCESS 0
+-#define HOST_NOT_FOUND 1 /**< NXDOMAIN (authoritative answer)*/
+-#define TRY_AGAIN 2 /**< SERVFAIL (no authoritative answer)*/
+-#define NO_RECOVERY 3 /**< invalid/unimplmeneted query */
+-#define NO_DATA 4 /**< host found, but no RR of req type*/
+-#endif
+ typedef int SPF_dns_stat_t;
+
+ typedef struct SPF_dns_server_struct SPF_dns_server_t;
/squeeze/debian/patches/20_spf_dns_include_std_headers.dpatch
Property changes:
Added: svn:executable
## -0,0 +1 ##
+*
\ No newline at end of property
Index: squeeze/debian/control
===================================================================
--- squeeze/debian/control (nonexistent)
+++ squeeze/debian/control (revision 77)
@@ -0,0 +1,63 @@
+Source: libspf2
+Priority: optional
+Section: libs
+Maintainer: Magnus Holmgren <holmgren@debian.org>
+Build-Depends: debhelper (>= 5), cdbs, dpatch, autotools-dev
+Standards-Version: 3.8.3
+Vcs-Svn: svn://svn.kibibyte.se/libspf2/trunk
+Vcs-Browser: http://svn.kibibyte.se/libspf2
+Homepage: http://www.libspf2.org/
+
+Package: libspf2-dev
+Section: libdevel
+Architecture: any
+Depends: libspf2-2 (= ${binary:Version}), ${misc:Depends}
+Description: Header and development libraries for libspf2
+ libspf2 implements the Sender Policy Framework, a part of the SPF/SRS
+ protocol pair. libspf2 is a library which allows email systems such
+ as Sendmail, Postfix, Exim, Zmailer and MS Exchange to check SPF
+ records and make sure that the email is authorized by the domain name
+ that it is coming from. This prevents email forgery, commonly used by
+ spammers, scammers and email viruses/worms.
+
+Package: libspf2-2
+Section: libs
+Architecture: any
+Conflicts: libspf2-0
+Replaces: libspf2-0
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: library for validating mail senders with SPF
+ libspf2 implements the Sender Policy Framework, a part of the SPF/SRS
+ protocol pair. libspf2 is a library which allows email systems such
+ as Sendmail, Postfix, Exim, Zmailer and MS Exchange to check SPF
+ records and make sure that the email is authorized by the domain name
+ that it is coming from. This prevents email forgery, commonly used by
+ spammers, scammers and email viruses/worms.
+
+Package: libspf2-2-dbg
+Section: debug
+Priority: extra
+Architecture: any
+Depends: libspf2-2 (= ${binary:Version}) | spfquery (= ${binary:Version}),
+ ${misc:Depends}
+Description: library for validating mail senders with SPF (debugging symbols)
+ libspf2 implements the Sender Policy Framework, a part of the SPF/SRS
+ protocol pair.
+ .
+ This package contains the debugging symbols.
+
+Package: spfquery
+Section: mail
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Conflicts: libmail-spf-query-perl (<< 1:1.999.1-3)
+Description: query SPF (Sender Policy Framework) to validate mail senders
+ The Sender Policy Framework (SPF) is one part of the SPF/SRS protocol
+ pair. SPF allows email systems such as Sendmail, Postfix, Exim,
+ Zmailer and MS Exchange to check SPF records and make sure that the
+ email is authorized by the domain name that it is coming from. This
+ prevents email forgery, commonly used by spammers, scammers and email
+ viruses/worms.
+ .
+ This package contains simple utilities that use libspf2 to test and
+ query SPF records.
Index: squeeze/debian/libspf2-2.symbols
===================================================================
--- squeeze/debian/libspf2-2.symbols (nonexistent)
+++ squeeze/debian/libspf2-2.symbols (revision 77)
@@ -0,0 +1,116 @@
+libspf2.so.2 libspf2-2 #MINVER#
+ SPF_debug_handler@Base 0
+ SPF_debug_stdio@Base 0
+ SPF_debug_syslog@Base 0
+ SPF_debugv@Base 0
+ SPF_debugx2@Base 0
+ SPF_debugx@Base 0
+ SPF_dns_cache_new@Base 0
+ SPF_dns_cache_set_ttl@Base 0
+ SPF_dns_free@Base 0
+ SPF_dns_get_client_dom@Base 0
+ SPF_dns_lookup@Base 0
+ SPF_dns_null_new@Base 0
+ SPF_dns_resolv_new@Base 0
+ SPF_dns_rlookup6@Base 0
+ SPF_dns_rlookup@Base 0
+ SPF_dns_rr_buf_realloc@Base 0
+ SPF_dns_rr_dup@Base 0
+ SPF_dns_rr_free@Base 0
+ SPF_dns_rr_new@Base 0
+ SPF_dns_rr_new_init@Base 0
+ SPF_dns_rr_new_nxdomain@Base 0
+ SPF_dns_set_conserve_cache@Base 0
+ SPF_dns_test_new@Base 0
+ SPF_dns_zone_add_str@Base 0
+ SPF_dns_zone_new@Base 0
+ SPF_error_code@Base 0
+ SPF_error_errorp@Base 0
+ SPF_error_handler@Base 0
+ SPF_error_message@Base 0
+ SPF_error_stdio@Base 0
+ SPF_error_syslog@Base 0
+ SPF_errorv@Base 0
+ SPF_errorx2@Base 0
+ SPF_errorx@Base 0
+ SPF_get_lib_version@Base 0
+ SPF_i_done@Base 0
+ SPF_info_handler@Base 0
+ SPF_info_stdio@Base 0
+ SPF_info_syslog@Base 0
+ SPF_infov@Base 0
+ SPF_infox2@Base 0
+ SPF_infox@Base 0
+ SPF_macro_free@Base 0
+ SPF_print_sizeof@Base 0
+ SPF_realloc@Base 1.2.9
+ SPF_record_compile@Base 0
+ SPF_record_compile_macro@Base 0
+ SPF_record_expand_data@Base 0
+ SPF_record_find_mod_value@Base 0
+ SPF_record_free@Base 0
+ SPF_record_interpret@Base 0
+ SPF_record_new@Base 0
+ SPF_record_print@Base 0
+ SPF_record_stringify@Base 0
+ SPF_request_free@Base 0
+ SPF_request_get_client_dom@Base 0
+ SPF_request_get_exp@Base 0
+ SPF_request_get_rec_dom@Base 0
+ SPF_request_is_loopback@Base 0
+ SPF_request_new@Base 0
+ SPF_request_query_fallback@Base 0
+ SPF_request_query_mailfrom@Base 0
+ SPF_request_query_rcptto@Base 0
+ SPF_request_set_env_from@Base 0
+ SPF_request_set_helo_dom@Base 0
+ SPF_request_set_ipv4@Base 0
+ SPF_request_set_ipv4_str@Base 0
+ SPF_request_set_ipv6@Base 0
+ SPF_request_set_ipv6_str@Base 0
+ SPF_response_add_error@Base 0
+ SPF_response_add_error_idx@Base 0
+ SPF_response_add_error_ptr@Base 0
+ SPF_response_add_warn@Base 0
+ SPF_response_add_warn_idx@Base 0
+ SPF_response_add_warn_ptr@Base 0
+ SPF_response_combine@Base 0
+ SPF_response_errcode@Base 0
+ SPF_response_errors@Base 0
+ SPF_response_free@Base 0
+ SPF_response_get_explanation@Base 0
+ SPF_response_get_header_comment@Base 0
+ SPF_response_get_received_spf@Base 0
+ SPF_response_get_received_spf_value@Base 0
+ SPF_response_get_smtp_comment@Base 0
+ SPF_response_message@Base 0
+ SPF_response_messages@Base 0
+ SPF_response_new@Base 0
+ SPF_response_reason@Base 0
+ SPF_response_result@Base 0
+ SPF_response_warnings@Base 0
+ SPF_sanitize@Base 0
+ SPF_server_free@Base 0
+ SPF_server_get_max_dns_mech@Base 0
+ SPF_server_get_max_dns_mx@Base 0
+ SPF_server_get_max_dns_ptr@Base 0
+ SPF_server_get_record@Base 0
+ SPF_server_new@Base 0
+ SPF_server_new_dns@Base 1.2.8~
+ SPF_server_set_explanation@Base 0
+ SPF_server_set_localpolicy@Base 0
+ SPF_server_set_max_dns_mech@Base 0
+ SPF_server_set_max_dns_mx@Base 0
+ SPF_server_set_max_dns_ptr@Base 0
+ SPF_server_set_rec_dom@Base 0
+ SPF_server_set_sanitize@Base 0
+ SPF_strerror@Base 0
+ SPF_strreason@Base 0
+ SPF_strresult@Base 0
+ SPF_strrrtype@Base 1.2.8~
+ SPF_warning_handler@Base 0
+ SPF_warning_stdio@Base 0
+ SPF_warning_syslog@Base 0
+ SPF_warningv@Base 0
+ SPF_warningx2@Base 0
+ SPF_warningx@Base 0
Index: squeeze/debian/rules
===================================================================
--- squeeze/debian/rules (nonexistent)
+++ squeeze/debian/rules (revision 77)
@@ -0,0 +1,19 @@
+#!/usr/bin/make -f
+
+SOURCE_PACKAGE = libspf2
+
+include /usr/share/cdbs/1/class/autotools.mk
+include /usr/share/cdbs/1/rules/debhelper.mk
+include /usr/share/cdbs/1/rules/dpatch.mk
+
+DEB_DH_MAKESHLIBS_ARGS_libspf2-2 = -V 'libspf2-2 (>= 1.2.9)'
+LDFLAGS += -Wl,--version-script=$(CURDIR)/debian/libspf2.ver
+DEB_DH_INSTALL_SOURCEDIR = debian/tmp
+
+binary-install/spfquery::
+# Rename the `spfquery` tool for the alternatives system:
+ mv debian/spfquery/usr/bin/spfquery debian/spfquery/usr/bin/spfquery.$(SOURCE_PACKAGE)
+ mv debian/spfquery/usr/sbin/spfd debian/spfquery/usr/sbin/spfd.$(SOURCE_PACKAGE)
+
+get-orig-source:
+ wget http://www.libspf2.org/spf/libspf2-1.2.9.tar.gz
/squeeze/debian/rules
Property changes:
Added: svn:executable
## -0,0 +1 ##
+*
\ No newline at end of property
Index: squeeze/debian/libspf2-dev.install
===================================================================
--- squeeze/debian/libspf2-dev.install (nonexistent)
+++ squeeze/debian/libspf2-dev.install (revision 77)
@@ -0,0 +1,3 @@
+usr/include/*
+usr/lib/lib*.a
+usr/lib/lib*.so
Index: squeeze/debian/spfquery.install
===================================================================
--- squeeze/debian/spfquery.install (nonexistent)
+++ squeeze/debian/spfquery.install (revision 77)
@@ -0,0 +1,4 @@
+usr/bin/spfquery
+usr/bin/spftest
+usr/bin/spf_example
+usr/bin/spfd usr/sbin
Index: squeeze/debian/libspf2-2.install
===================================================================
--- squeeze/debian/libspf2-2.install (nonexistent)
+++ squeeze/debian/libspf2-2.install (revision 77)
@@ -0,0 +1 @@
+usr/lib/lib*.so.*
Index: squeeze/debian/copyright
===================================================================
--- squeeze/debian/copyright (nonexistent)
+++ squeeze/debian/copyright (revision 77)
@@ -0,0 +1,39 @@
+This package was debianized by Eric Dorland <eric@debian.org> on
+Sun, 04 Jul 2004 19:00:36 -0400
+
+The current maintainer is Magnus Holmgren <holmgren@debian.org>.
+
+It was downloaded from http://www.libspf2.org/
+
+Upstream authors:
+ - Current maintainer: Shevek <libspf2@anarres.org>
+ - Contributors: Magnus Holmgren, Julian Mehnle, Scott Kitterman,
+ Dan Kaminsky, Ben Chelf, Hannah Schroeter, Manish Raje
+ - Original author, 1.0 series: Wayne Schlitt <wayne@schlitt.net>
+
+Copyright:
+
+Software copyright © 2004-2005 Wayne Schlitt and Shevek,
+ © 2008 Shevek.
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of either:
+
+ a) The GNU Lesser General Public License as published by the Free
+ Software Foundation; either version 2.1, or (at your option) any
+ later version,
+
+ OR
+
+ b) The two-clause BSD license.
+
+On Debian systems, the complete text of the GNU Lesser General Public
+License can be found in the file `/usr/share/common-licenses/LGPL' and
+the BSD license can be found in the file `/usr/share/common-licenses/BSD'.
+
+The parts of the Debian packaging that is eligible for copyright is ©
+2004-2006 Eric Dorland, 2007-2008 Magnus Holmgren and assumed to be
+licensed under the same licenses as above. The spfquery(1) manpage
+is (Giving the LGPL as an alternative is quite redundant as the BSD
+license is so permissive that it allows redistribution under the LGPL
+or most other licenses anyway).
Index: squeeze/debian/README.source
===================================================================
--- squeeze/debian/README.source (nonexistent)
+++ squeeze/debian/README.source (revision 77)
@@ -0,0 +1,8 @@
+This package uses dpatch to manage all modifications to the upstream
+source. Changes are stored in the source package as diffs in
+debian/patches and applied during the build. For basic usage
+information, see
+
+ /usr/share/doc/dpatch/README.source.gz
+
+(after installing dpatch).
Index: squeeze/debian/spfquery.postinst
===================================================================
--- squeeze/debian/spfquery.postinst (nonexistent)
+++ squeeze/debian/spfquery.postinst (revision 77)
@@ -0,0 +1,17 @@
+#!/bin/sh -e
+
+mode=$1
+
+source_package=libspf2
+
+case "$mode" in
+ configure )
+ prev_version=$2
+
+ update-alternatives --install /usr/bin/spfquery spfquery /usr/bin/spfquery.$source_package 25 \
+ --slave /usr/share/man/man1/spfquery.1.gz spfquery.1.gz /usr/share/man/man1/spfquery.$source_package.1.gz
+ update-alternatives --install /usr/sbin/spfd spfd /usr/sbin/spfd.$source_package 25
+ ;;
+esac
+
+#DEBHELPER#
Index: squeeze/debian/spfquery.manpages
===================================================================
--- squeeze/debian/spfquery.manpages (nonexistent)
+++ squeeze/debian/spfquery.manpages (revision 77)
@@ -0,0 +1 @@
+debian/spfquery.libspf2.1
Index: squeeze/debian/spfquery.libspf2.1
===================================================================
--- squeeze/debian/spfquery.libspf2.1 (nonexistent)
+++ squeeze/debian/spfquery.libspf2.1 (revision 77)
@@ -0,0 +1,199 @@
+.\" Title: SPFQUERY
+.\" Author: Magnus Holmgren <magnus@kibibyte.se>
+.\" Date: 2007-09-06
+.\" Manual: libspf2 manuals for Debian
+.\" Source: libspf2 1.2.5
+.\"
+.TH "SPFQUERY" "1" "2007-09-06" "libspf2 1.2.5" "libspf2 manuals for Debian"
+.\" disable hyphenation
+.nh
+.SH NAME
+spfquery, spfquery.libspf2 \- checks if an IP address is an SPF-authorized SMTP sender for a domain.
+.SH SYNOPSIS
+.ad l
+.HP 9
+.B spfquery
+.RB { \-i | \-\-ip }
+.I ip\-address
+.RB { -s | \-\-sender }
+.RI [ local-part \fB@\fP] domain
+.RB [{ \-h | \-\-helo }
+.IR domain-name ]
+.RB [ \-\-rcpt\-to
+.IR email-address(es) ]
+.RI [ CONTROL-OPTIONS ]
+.HP 9
+.B spfquery
+.RB { \-f | \-\-file }
+.IR datafile " [" CONTROL-OPTIONS ]
+.HP 9
+.B spfquery
+.RB { \-\-help | \-v | \-\-version }
+.ad b
+.SH DESCRIPTION
+This manual page documents briefly the
+\fBspfquery\fR
+command. It was written for the
+Debian\*[R] distribution because the original program does not have a manual page.
+.PP
+\fBspfquery\fR performs Sender Policy Framework (SPF) authorization
+checks based on the command-line arguments or data given in a file or
+on standard input. For information on SPF see http://www.openspf.org.
+.
+.SH OPTIONS
+Options are divided into two groups: Data options, which must be
+given, though just enough of them to specify a query; and control
+options, which are optional and control the local policy, behaviour
+and output format of spfquery.
+.PP
+This programs follows the GNU \fBgetopt_long_only\fR(3) command line
+syntax: Long options can be given with one or two dashes and can be
+abbreviated to a prefix long enough to be non-ambiguous. If an option
+starting with a single dash doesn't match a long option, it is taken
+as a short option with a following parameter, if applicable. An equals
+sign between the option name and the parameter is optional for both
+short and long options.
+.SS Data options
+The
+\fB\-\-file\fR option conflicts with all the other data options. The
+\fB\-\-helo\fR and \fB\-\-rcpt\-to\fR are optional.
+.TP
+\fB\-f\fR, \fB\-\-file\fR \fIfilename\fR
+Read SPF data from \fIfilename\fR. Specify \(lq-\(rq to read from standard input.
+.sp
+The file should consist of one line per query, each query line consisting of the IP address, sender adress, and optional HELO string, separated by spaces.
+.sp
+\fBNote\fP
+Local parts containing spaces are currently not supported.
+.TP
+\fB\-i\fP, \fB\-\-ip\fP \fIip-address\fP
+Specify the IP address of the remote host that is delivering the mail.
+.TP
+\fB\-s\fP, \fB\-\-sender\fP [\fIlocal-part\fP\fB@\fP]\fIdomain\fP
+Specify the email address that was used as the envelope sender. If no
+username (local part) is given, \(lqpostmaster\(rq will be assumed.
+.TP
+\fB\-h\fP, \fB\-\-helo\fP \fIdomain-name\fP
+Specify that \fIdomain-name\fP was provided in the SMTP HELO (or EHLO) command.
+.TP
+\fB\-r\fP, \fB\-\-rcpt-to\fP \fIrcpt-address\fP[,\fIrcpt-address\fP,...]
+Specify the recipients as comma-separated list. Any secondary mail exchangers of all
+recipient domains are automatically authorized.
+.
+.SS Control options
+.TP
+\fB\-d\fP, \fB\-\-debug\fP[\fB=\fP\fIlevel\fP]
+Turn on debugging output.
+.TP
+\fB\-l\fP, \fB\-\-local\fP \fIspf\-terms\fP
+Test against \fIspf\-terms\fR before the final (implicit or explicit)
+\(lqall\(rq in an SPF record. This can be used to implement a local policy for whitelisting.
+.TP
+\fB\-t, \fB\-\-trusted\fR [\fB1\fR]
+Check the sender domain with trusted\-forwarder.org.
+\fBThis is a non\-standard feature.\fR
+.TP
+\fB\-t\fP \fB0\fP, \fB\-\-trusted\fR \fB0\fP
+Do not check the sender domain with trusted\-forwarder.org. This is the default.
+.TP
+\fB\-g\fP, \fB\-\-guess\fP \fIspf-mechanisms\fP
+Test the sender domain against \fIspf\-mechanisms\fP if the domain has no SPF record.
+.TP
+\fB\-e\fP, \fB\-\-default\-explanation\fP \fIstring\fP
+Default explanation string to use if the SPF record does not specify an expla\%nation string itself.
+.TP
+\fB\-m\fP, \fB\-\-max\-lookup\fP \fInumber\fP
+Maximum number of DNS lookups to allow.
+.TP
+\fB\-c\fP, \fB\-\-sanitize\fP [\fB0\fP|\fB1\fP]
+Do [not] sanitize the output by condensing conse\%cutive white\%space
+into a single space and replacing non-printable characters with
+question marks. Enabled by default.
+.TP
+\fB\-n\fP, \fB\-\-name\fP \fIhostname\fP
+Use
+\fIhostname\fP
+as the name of the local system instead of
+\(lqspfquery\(rq
+(the name is used in the output).
+.TP
+\fB\-k\fP, \fB\-\-keep\-comments\fP
+Print comments found when reading from a file.
+.TP
+\fB\-a\fP, \fB\-\-override\fP \fI...\fP
+.TP
+\fB\-z\fP, \fB\-\-fallback\fP \fI...\fP
+Provide override and fallback SPF records for certain domains.
+\fBNot implemented yet.\fP
+\fBspfquery\fP
+would act as if the speci\%fied records were present before and after any existing record, respectively, of those domains.
+.TP
+\fB\-\-help\fP
+Show summary of options.
+.TP
+\fB\-v\fP, \fB\-\-version\fP
+Show version of program.
+.SH DIAGNOSTICS
+The output ordinarily consists of four lines:
+.IP 1. 4
+the \fIresult code\fP;
+.IP 2. 4
+the \fIexplanation\fP, suitable for use in an SMTP response message, empty
+except when a rejection (permanent or temporary) makes sense;
+.IP 3. 4
+the header comment on its own;
+.IP 4. 4
+the Received\-SPF header field as defined in RFC 4408 section 7,
+incorporating the header comment.
+.PP
+If errors (including no SPF record found!) occur during processing,
+one or more error blocks will be prepended.
+These start with \(lqStartError\(lq and end with \(lqEndError\(lq.
+.PP
+The result codes and their corresponding exit codes are as follows:
+.TP
+.B 1 \(en neutral
+The sender domain explicitly makes no assertion about the \fIip-address\fP.
+This result must be interpreted exactly as if no SPF record at all existed.
+.TP
+.B 2 \(en pass
+The \fIip-address\fP is authorized to send mail for the sender domain.
+.TP
+.B 3 \(en fail
+The \fIip-address\fP is \fBunauthorized\fP to send mail for the sender domain.
+.TP
+.B 4 \(en softfail
+The \fIip-address\fP is not authorized to send mail for the sender domain, but
+the sender domain cannot or does not wish to make a strong assertion that no such mail can
+ever come from it.
+.TP
+.B 5 \(en none
+No SPF record was found.
+.TP
+.BR "6 \(en error" " (temporary)"
+A transient error occurred (e.g. failure to reach a DNS server), preventing a
+result from being reached.
+.TP
+.BR "7 \(en unknown" " (permanent error)"
+One or more SPF records could not be interpreted.
+.SH EXAMPLES
+.nf
+spfquery \-ip=11.22.33.44 \-sender=user@aol.com \-helo=spammer.tld
+spfquery \-f test_data
+echo "127.0.0.1 myname@mydomain.com helohost.com" | spfquery \-f \-
+.fi
+.SH SEE ALSO
+\fBspftest\fR(1), \fBspfd\fR(8)
+.SH AUTHOR
+\fBspfquery\fP was written by Wayne Schlitt.
+.PP
+This manual page was written by Magnus Holmgren for the Debian\*[R]
+system (but may be used by others). Heavily inspired by the spfquery manpage of
+libmail\-spf\-query\-perl (\fBspfquery.mail\-spf\-query\-perl\fR(1)) by Julian Mehnle.
+Also based on the command\-line help of spfquery.
+.SH COPYRIGHT
+Copyright \(co 2007 Magnus Holmgren. Permission is granted to copy,
+distribute and/or modify this document under the terms of the BSD
+License.
+.PP
+On Debian systems, the complete text of the BSD License can be found in /usr/share/common\-licenses/BSD.
Index: squeeze/debian/watch
===================================================================
--- squeeze/debian/watch (nonexistent)
+++ squeeze/debian/watch (revision 77)
@@ -0,0 +1,3 @@
+version=3
+
+opts=dversionmangle=s/\.dfsg$// http://www.libspf2.org/download.html spf/libspf2-(.+)\.tar\.gz
Index: squeeze/debian/spfquery.prerm
===================================================================
--- squeeze/debian/spfquery.prerm (nonexistent)
+++ squeeze/debian/spfquery.prerm (revision 77)
@@ -0,0 +1,14 @@
+#!/bin/sh -e
+
+mode=$1
+
+source_package=libspf2
+
+case "$mode" in
+ remove )
+ update-alternatives --remove spfquery /usr/bin/spfquery.$source_package
+ update-alternatives --remove spfd /usr/sbin/spfd.$source_package
+ ;;
+esac
+
+#DEBHELPER#
Index: squeeze/debian/compat
===================================================================
--- squeeze/debian/compat (nonexistent)
+++ squeeze/debian/compat (revision 77)
@@ -0,0 +1 @@
+5
Index: squeeze/debian
===================================================================
--- squeeze/debian (nonexistent)
+++ squeeze/debian (revision 77)
/squeeze/debian
Property changes:
Added: mergeWithUpstream
## -0,0 +1 ##
+1
\ No newline at end of property