Rev 3 | Details | Compare with Previous | Last modification | View Log | RSS feed
| Rev | Author | Line No. | Line | 
|---|---|---|---|
| 1 | magnus | 1 | <!-- <li>2004/08/23 - v4.2.1+cvs (<a href="files/sa-exim-cvs.tar.gz">sa-exim cvs tar.gz</a> | 
| 2 | (latest version available via CVS only, or a somewhat recent via | ||
| 3 | <a href="files/sa-exim-cvs.tar.gz">this link</a>) --> | ||
| 4 | |||
| 5 | <li>2006/01/09 - v4.2.1 (<a href="files/sa-exim-4.2.1.tar.gz">sa-exim.tar.gz</a> | ||
| 6 | or <a href="files/local_scan/local_scan.c_4.2.1">local_scan only</a>) | ||
| 7 | <br><b>Security update</b> (reported by Chris Morris) | ||
| 8 | <ul> | ||
| 9 | <li>Modified Greylisting.pm not to generate tuplets with spaces, although | ||
| 10 | the cleaning cron job is now safe with regard to whitespace | ||
| 11 | <li>Included Mark Lawrence's perl script to better clean old tuplets | ||
| 12 |     <li>The default config now ships with the greylistclean cronjob running | ||
| 13 |         as nobody (which spamd should be running as, too) | ||
| 14 |     </ul> | ||
| 15 | |||
| 16 | <li>2005/01/17 - v4.2 (<a href="files/sa-exim-4.2.tar.gz">sa-exim.tar.gz</a> | ||
| 17 | or <a href="files/local_scan/local_scan.c_4.2">local_scan only</a>) | ||
| 18 |     <br><b>Do not use, greylistclean is insecure, use 4.2.1 instead</b> | ||
| 19 |     <ul> | ||
| 20 |     <li>Fixed code so that it compiles inside the exim tree too (thanks Jason) | ||
| 21 |     <li>Support SA 3.0 new score reporting format (score= instead of hits=) | ||
| 22 |     <li>Proper SA 3.0 plugin support | ||
| 23 |     <li>Documentation updates | ||
| 24 |     <li>greylisting files now also save the last SA score, just in case | ||
| 25 |     <li>Saved files are now group read/write too, if you need to shut off group | ||
| 26 |         access, do it at the directory level | ||
| 27 |     <li>Only rewrite Content-Type/Content-Transfer-Encoding if SARewriteBody is | ||
| 28 |         on now (this used to be useful with old SA versions and defang_mime | ||
| 29 |         but those options are gone). Suggested by Adam Tilghman. | ||
| 30 |     <li>Finally made all score threshold variables exim conditions that are | ||
| 31 |         evaluated at runtime | ||
| 32 |     <li>SAteergrubecond is deprecated as a result | ||
| 33 |     </ul> | ||
| 34 | |||
| 35 | <li>2004/08/16 - v4.1 (<a href="files/sa-exim-4.1.tar.gz">sa-exim.tar.gz</a> | ||
| 36 | or <a href="files/local_scan/local_scan.c_4.1">local_scan only</a>) | ||
| 37 |     <b>Please see the mailing list, or use the CVS version if you are compiling | ||
| 38 |     sa-exim inside your exim tree</b> (there is a small mistake in the source | ||
| 39 |     which will prevent proper building) / <b>You also need CVS if you are | ||
| 40 |     using SA 3.0</b> | ||
| 41 |     <ul> | ||
| 42 |     <li>Deal with being called with the number of recipients is 0 (reported by | ||
| 43 |         John Horne) | ||
| 44 |     <li>Made hopefully fully 64 bit clean (well, it was written that way, | ||
| 45 |         except for that pesky printf in C, which got in the way). Kudos go to | ||
| 46 |         Adam D. Barratt for finding and explaining the bug | ||
| 47 |     <li>Switched to using strchr instead of index to remove compilation warnings | ||
| 48 |         on some systems (reported by John Horne/Jeff Carter) | ||
| 49 |     <li>Added SAspamcHost/SAspamcPort at the request of several people | ||
| 50 |     <li>Fixed mbox From file to be standards complaint (reported by Cliff Hones) | ||
| 51 |     <li>Added SAFEMESGIDCHARS option for safer message-id based filenames | ||
| 52 |     <li>New version of the SA patch, with safe file creation (clean env from | ||
| 53 |         and rcpt to before using as directory names) | ||
| 54 |     <li><b>IMPORTANT</b>: if you are using greylisting, and applied the | ||
| 55 |         previous greylisting patch, it didn't create shell safe filenames, | ||
| 56 |         it is therefore highly recommended that you apply the new version | ||
| 57 | <li>Added a quick patch to sa-exim to deal with headers that are longer | ||
| 58 | than 8K (and drop the remaining lines) | ||
| 59 | </ul> | ||
| 60 | |||
| 61 | |||
| 62 | <li>2004/03/16 - v4.0 (<a href="files/sa-exim-4.0.tar.gz">sa-exim.tar.gz</a> | ||
| 63 | or <a href="files/local_scan/local_scan.c_4.0">local_scan only</a>) | ||
| 64 | <ul> | ||
| 65 | <li>Added SAspamcpath (from Richard Lithvall) | ||
| 66 | <li>Makefile fixes for version.h and dependencies | ||
| 67 | <li>Added exim acl_m trick from Chirik in README | ||
| 68 | <li>New code to read and pass on any X-Spam- header from SpamAssassin | ||
| 69 | <li>Message-Id is now logged in SA log entries to allow you track down | ||
| 70 |         a message in other logfiles, like SA's log | ||
| 71 |     <li>Add X-SA-Exim-Connect-IP header for greylisting | ||
| 72 |     <li>Allow for tempreject on messages not flagged as spam by SA (for | ||
| 73 |         greylisting) | ||
| 74 |     <li>Added greylisting support (see README.greylisting) | ||
| 75 |     <li>Added the following options to sa-exim.conf: | ||
| 76 |         <ul> | ||
| 77 |         <li>SAspamcSockPath | ||
| 78 |         <li>SAgreylistiswhitestr | ||
| 79 |         <li>SAgreylistraisetempreject | ||
| 80 |         </ul> | ||
| 81 |     <li>Lots of documentation fixes and updates | ||
| 82 |     <li>Basic debian tree shipped by default (but real deb package from Sander | ||
| 83 |         Smeenk) | ||
| 84 |     </ul> | ||
| 85 | |||
| 86 | <li>2003/08/18 - v3.1 (<a href="files/sa-exim-3.1.tar.gz">sa-exim tar.gz</a> | ||
| 87 |     or <a href="files/local_scan/local_scan.c_3.1">local_scan only</a>) | ||
| 88 |     <ul> | ||
| 89 |     <li>Fixed <em>SA: Action: teergrubed sender until full configured duration</em> output | ||
| 90 |     <li>spamassassin.conf was renamed sa-exim.conf (bad initial name choice) | ||
| 91 |     <li>Changed teergrubing so that it works with exim 4.20 and above | ||
| 92 |     <li>Added the much requested SARewriteBody option for SA 2.50's report_safe | ||
| 93 | (courtesy of Richard Lithvall) | ||
| 94 | <li>Added SAaddSAEheaderBeforeSA to deal with SARewriteBody and privacy | ||
| 95 | <li>Added SAPrependArchiveWithFrom option (Richard Lithvall) | ||
| 96 | <li>As announced in the previous version, SAStallSender was removed. | ||
| 97 | Use Teergrubing instead | ||
| 98 | <li>Message-Id is read directly from Exim now that the API allows for that | ||
| 99 | (we used to parse the Message-Id header ourselves) -> except that | ||
| 100 |         we don't use this for logging or saving messages: as soon as we can | ||
| 101 |         read the real Message-Id from the headers, we use that Message-Id for | ||
| 102 |         logging (this is to facilitate tracking of messages from the logs and | ||
| 103 |         correlating with something like SA timelog files) | ||
| 104 |     <li>Logging improved some more: Message-Id is added to log entries, as | ||
| 105 |         well as the full mailinfo whether the message is spam or not | ||
| 106 |     </ul> | ||
| 107 | |||
| 108 | <li>2003/04/30 - v3.0 (<a href="files/sa-exim-3.0.tar.gz">sa-exim tar.gz</a> | ||
| 109 |     or <a href="files/local_scan/local_scan.c_3.0">local_scan only</a>) | ||
| 110 |     <ul> | ||
| 111 |     <li>Makefile can generate a short sa-exim.conf (for Brian Kendig) | ||
| 112 |     <li>Added a contrib directory with 3rd party scripts | ||
| 113 |     <li>Since we already had X-SA-Exim-Rcpt-To: to show the envelope to | ||
| 114 |         (disabled by default), I added X-SA-Exim-Mail-From: to show the | ||
| 115 |         envelope from (always enabled, but you can delete it in system_filter | ||
| 116 |         if you wish). If you can't easily see or parse the envelope sender | ||
| 117 | in your mails, this should definitely help | ||
| 118 | <li>Much improved directory creation and error handling for the reject | ||
| 119 | save directories | ||
| 120 | <li>Added SIGCHLD patch from David Woodhouse | ||
| 121 | <li>Added version header that looks like this: | ||
| 122 | X-SA-Exim-Version: 2.2.x-cvs (built Tue Apr 22 10:28:25 PDT 2003) | ||
| 123 | <li>Rewrote pretty much every log message to be more consistent and grepable | ||
| 124 | (the previous ones were quite bad). Suggested by multiple people | ||
| 125 | including Brian Kendig | ||
| 126 | <li>Made the SMTP error messages finally configurable (suggested by | ||
| 127 |         several people). This is now possible since exim lets me output a | ||
| 128 | different message in the log than in the SMTP session. Consequently, new | ||
| 129 | default messages do not show the spam score, this only goes to the exim | ||
| 130 | now. | ||
| 131 | <li>Made SAmaxrcptlistlength and option to control how long of a | ||
| 132 | X-SA-Exim-Rcpt-To header you can output if you want to output it at | ||
| 133 | all | ||
| 134 | <li>Do not output "savemail condition expanded to false" if not in debug | ||
| 135 | mode (as reported by Brian Kendig) | ||
| 136 | <li>Now ships with a sample local_scan.h if we can't find the exim source | ||
| 137 |     <li>Change of logic to delete SA headers that were in the original mail | ||
| 138 | but weren't outputted by the SA run (like X-Spam-Flag, as reported | ||
| 139 |         by Chad Leigh) | ||
| 140 | <li>Modified local_scan dlopen patch to deal with updates to the exim | ||
| 141 | local_scan API | ||
| 142 | <li>The default location for spamasassin.conf was changed to /etc/exim4 | ||
| 143 | (debian default) | ||
| 144 | <li>Updated README and INSTALL | ||
| 145 | <li>Updated localscan_dlopen.patch to deal with minor/major version numbers | ||
| 146 | <li>Added X-SA-Exim-Version | ||
| 147 | </ul> | ||
| 148 | <li>2002/10/28 - v2.2 (<a href="files/sa-exim-2.2.tar.gz">sa-exim tar.gz</a> | ||
| 149 | or <a href="files/local_scan/local_scan.c_2.2">local_scan only</a>) | ||
| 150 | <ul> | ||
| 151 | <li>Fixed a bug that affected all mails bigger than what spamc would | ||
| 152 | accept. Doh! (it not clear why, but spamc would hang and stop reading | ||
| 153 | after it had been fed more than it was willing to accept) | ||
| 154 | <li>Added more debugging code to help track the above problem | ||
| 155 | <li>Depending on SATruncBodyCond will now either not pass a message that's | ||
| 156 |         too big to spamc, or will optionally truncate it first | ||
| 157 |     <li>Now strips any X-SA-Exim-* headers already present in the message before | ||
| 158 |         scanning it | ||
| 159 |     <li>Added new X-SA-Exim-Rcpt-To: header (see privacy section in README) | ||
| 160 |         after a suggestion from Brian Kendig | ||
| 161 |     <li>Teergrube is now spelled correctly (note that the option names in | ||
| 162 |         sa-exim.conf changed as a result) | ||
| 163 |     <li>Teergrubing has been re-implemented to detect that the other side went | ||
| 164 | away so that exim doesn't stay around for nothing. | ||
| 165 | <li>Added SAteergrubecond so that you don't teergrube your neighbours | ||
| 166 |     <li>Small cleanups | ||
| 167 |     </ul> | ||
| 168 | <li>2002/10/13 - v2.1 (buggy) (<a href="files/sa-exim-2.1.tar.gz">sa-exim tar.gz</a> | ||
| 169 |     or <a href="files/local_scan/local_scan.c_2.1">local_scan only</a>) | ||
| 170 |     <ul> | ||
| 171 |     <li>Default mail config is now in /etc/exim instead of /etc/mail | ||
| 172 |     <li>Fixed SAstallsender so that exim doesn't leave spool files behind | ||
| 173 | <li>Fixed comparison for spam values as suggested by Patrice Fournier | ||
| 174 | <li>Returned a header saying whether SA-Exim was able to scan the mail | ||
| 175 | or not (based on a suggestion from Patrice Fournier) | ||
| 176 | <li>Added support for teergrubing as suggested by Robert Strickler | ||
| 177 |         (see | ||
| 178 | <A HREF="http://www.iks-jena.de/mitarb/lutz/usenet/teergrube.en.html"> | ||
| 179 | http://www.iks-jena.de/mitarb/lutz/usenet/teergrube.en.html</A>) | ||
| 180 | <li>We now make sure that we feed spamc a little more data than it's | ||
| 181 |         willing to accept. That way, we don't feed a truncated message | ||
| 182 | <li>sa-exim.conf now appends /new on save directories so that they | ||
| 183 | are valid maildir spool and you can run mutt -f dirname to read | ||
| 184 | <li>Small cleanups | ||
| 185 | </ul> | ||
| 186 | |||
| 187 | <li>2002/07/07 - v2.0.1 (<a href="files/sa-exim-2.0.1.tar.gz">sa-exim tar.gz</a> | ||
| 188 | or <a href="files/local_scan/local_scan.c_2.0.1">local_scan only</a>) | ||
| 189 | <ul> | ||
| 190 | <li>Removed unneeded ## concatenation in macro | ||
| 191 | <li>Fixed lseek call, as reported by Peter N Lewis | ||
| 192 | <li>Improved Makefile for documentation | ||
| 193 | <li>Suggestion from dman to allow for config options overrides in Makefile | ||
| 194 | <li>Fixed all the compiler warnings that were fixable | ||
| 195 | <li>Handle more kinds of Message-Id as suggested by Patrice Fournier | ||
| 196 | </ul> | ||
| 197 | |||
| 198 | <li>2002/06/14 - v2.0 (<a href="files/sa-exim-2.0.tar.gz">sa-exim tar.gz</a> | ||
| 199 | or <a href="files/local_scan/local_scan.c_2.0">local_scan only</a>) | ||
| 200 | <ul> | ||
| 201 | <li>Allow for stalling SMTP sessions from spammers (caution) | ||
| 202 | <li>Support X-Spam-Status from SA pre 2.30 | ||
| 203 | <li>Build patches from Norm <norm@sandbox.org.uk> | ||
| 204 | <li>Documented that spamd shouldn't be run with -c | ||
| 205 | <li>dman's patch to allow for this to be a shared library | ||
| 206 | <li>dman's indirect request for saved files to be 660 | ||
| 207 |     </ul> | ||
| 208 | <li><a href="files/local_scan/local_scan.c_2.0b1">2002/06/01 - v2.0b1</a><br> | ||
| 209 |     This is how 1.0 would have been if I had done it right :-) | ||
| 210 |     <ul> | ||
| 211 |     <li>We now attempt to create directories we write to | ||
| 212 |         (suggestion from Patrice Fournier) | ||
| 213 |     <li>Log envelope sender, recipients and connecting host | ||
| 214 |         on rejected messages (suggestion from Patrice Fournier) | ||
| 215 |     <li>We can now save non rejected messages whether they were | ||
| 216 |         flagged as spam or not (based on request from Patrice) | ||
| 217 |     <li>Each save rule now has its own condition that lets you | ||
| 218 |         decide which messages you want to save or not | ||
| 219 |     <li>Fixed parsing of Message-Id. May not parse all of them | ||
| 220 |         but won't do anything stupid with bad input | ||
| 221 | <li>Fixed a buglet where we removed old headers before knowing | ||
| 222 | whether they were going to be replaced. | ||
| 223 | <li>Added much needed internal alarm so that we don't run | ||
| 224 |         too long | ||
| 225 |     <li>I added lots of options, but weren't able to test all | ||
| 226 | of them and their combinations, please reports problems | ||
| 227 | you may notice and documentation issues (in config file) | ||
| 228 | <li>Thanks also go to dman for his plentiful feedback | ||
| 229 | </ul> | ||
| 230 | <li><a href="files/local_scan/local_scan.c_1.3">2002/05/21 - v1.3</a> | ||
| 231 | <ul> | ||
| 232 | <li>We now close the files we create on disk. Duh! | ||
| 233 | </ul> | ||
| 234 | <li><a href="files/local_scan/local_scan.c_1.2.2">2002/05/17 - v1.2.2</a> | ||
| 235 | <ul> | ||
| 236 | <li>SA options are now kept in memory. Small cleanups | ||
| 237 | </ul> | ||
| 238 | <li><a href="files/local_scan/local_scan.c_1.2.1">2002/05/13 - v1.2.1</a> | ||
| 239 | <ul> | ||
| 240 | <li>v1.2 (unreleased) didn't work right: it tagged messages | ||
| 241 |         properly, but failed to see what was marked as spam and | ||
| 242 |         couldn't reject messages. Fixed. | ||
| 243 | <li>Stripped newlines in header lines (better for logging) | ||
| 244 | <li>fixed header_add bug if headers contained '%' | ||
| 245 | </ul> | ||
| 246 | <li><a href="files/local_scan/local_scan.c_1.2">2002/05/12 - v1.2</a> (unreleased) | ||
| 247 | <ul> | ||
| 248 | <li>According to Craig R Hughes, any X-Spam header can be multiline. | ||
| 249 |         Let's parse them accordingly | ||
| 250 |     </ul> | ||
| 251 | <li><a href="files/local_scan/local_scan.c_1.1.1">2002/05/08 - v1.1.1</a> | ||
| 252 |     <ul> | ||
| 253 |     <li>Added fake envelope from to mails that we save on disk | ||
| 254 |         so that they can be opened with MUAs (idea from dman) | ||
| 255 |     </ul> | ||
| 256 | <li><a href="files/local_scan/local_scan.c_1.1">2002/05/07 - v1.1</a> | ||
| 257 |     <ul> | ||
| 258 |     <li>Cleaned up and fixed multiline header parsing | ||
| 259 |     <li>Added parsing of Subject back from Spamc (suggestion from dman) | ||
| 260 |     <li>We now log how long spamc took, and all messages processed | ||
| 261 |         by spamc get logged in mainlog so that we know the outcome | ||
| 262 |     <li>Added custom header compare function to handle mixed case headers | ||
| 263 |     </ul> | ||
| 264 | <li><a href="files/local_scan/local_scan.c_1.0.1">2002/05/06 - v1.0.1</a> | ||
| 265 |     <ul> | ||
| 266 |     <li>Fixed problems with reading Content-Type back from spamc | ||
| 267 |        (we used to read whole body too, ooops...) | ||
| 268 |     <li>Handle multi-line Content-Type headers. | ||
| 269 |     <li>All log entries now start with "SA: " | ||
| 270 |     <li>If SA gets run twice, we drop the previous X-Spam headers | ||
| 271 |     <li>Support for X-Spam-Prev-Content-Transfer-Encoding | ||
| 272 |     </ul> | ||
| 273 | <li><a href="files/local_scan/local_scan.c_1.0">2002/05/05 - v1.0</a> | ||
| 274 |     <ul> | ||
| 275 |     <li>*Many* changes. This is now a real program with hopefully | ||
| 276 |         most of the configuration options people could need | ||
| 277 |     <li>Fully configurable through external config file | ||
| 278 |     <li>Condition to run or not run SA against a message | ||
| 279 |     <li>3 Levels of spam handling | ||
| 280 |     <li>Option to save messages that are rejected or cause errors | ||
| 281 |     <li>Very complete error checking | ||
| 282 |     </ul> | ||
| 283 | <li><a href="files/local_scan/local_scan.c_0.9.1">2002/04/17 - v0.9.1</a> | ||
| 284 |     <ul> | ||
| 285 |     <li>Added a few checks for possible failures | ||
| 286 |     </ul> | ||
| 287 | <li><a href="files/local_scan/local_scan.c_0.9">2002/04/16 - v0.9</a> | ||
| 288 |     <ul> | ||
| 289 |     <li>Pre-release | ||
| 290 |     </ul> | ||
| 291 | </ul> |