forked from linsomniac/tumgreyspf
-
Notifications
You must be signed in to change notification settings - Fork 0
/
WHATSNEW
290 lines (217 loc) · 10.4 KB
/
WHATSNEW
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
================================
Version 1.37 -- Mon Aug 12, 2013
Handling pyspf 2.0.8 and higher which remove some functions we rely on.
Reported by Jeroen Ruigrok van der Werven.
Simplifying the loopback detection code, using simple address checking
or CIDR testing if the ipaddress module is available. The new
code checks for common loopback addresses, and if it isn't one of
those it will try doing a more extensive check if the "ipaddress"
module is avaiable. If not, it assumes this is good enough.
The "ipaddress" module is included in Python 3.3, or for Python 2:
https://pypi.python.org/pypi/py2-ipaddress/1.0
This is entirely optional.
Adding a unittest if run with "--test", currently just testing loopback
detection code.
================================
Version 1.36 -- Thu Nov 24, 2011
New configuration setting "spfAcceptOnPermError" will accept e-mail from
hosts that have invalid SPF records. This is probably the right
thing to do, so defaulting to enabled. Contributed by Jesse Norell.
Added a "COMMON PROBLEMS" section to README, with suggested text from
George Sexton.
Changed README to put tumgreyspf in recipient restrictions, not sender.
Reported by George Sexton.
Bug fixed in tumgreyspf-clean when using greylistIpOnly, it wasn't removing
greylist entries. Reported by Michael Meelis and others.
================================
Version 1.35 -- Wed Jul 23, 2009
Fixed a bug caused when the SPF record has a NUL in it.
Reported by Thomas Goirand
================================
Version 1.34 -- Wed Jun 10, 2009
Fixing a bug which caused many SPF return results to bypass greylisting.
Identified by Tomasz 'urug' Olszewski
================================
Version 1.33 -- Sun Jul 20, 2008
Pretty print the time in tumgreyspf-stat, based on code by Luis Botero.
Fixing a code bug causing error "global name 'Except' is not defined"
Reported by Joe Lowe.
================================
Version 1.32 -- Thu Nov 29, 2007
Rephrasing part of the documentation per suggestion from martin f krafft.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453370
================================
Version 1.31 -- Thu Nov 01, 2007
Patch from Miklos HONTI to fix a bug in the SPF checker that would prevent
it from continuing on if SPF returns "none".
================================
Version 1.30 -- Tue Oct 16, 2007
Fixing thinko in the patch in the last release. Submitted by Thomas Goirand
================================
Version 1.29 -- Wed Oct 10, 2007
Minimal man page contributed by Thomas Goirand.
Add a header if the SPF check throws an exception for any reason.
Suggested by Radoslaw Stachowiak
If SPF returns "none" indicating no SPF record, allow checking to continue
on to other checkers. For example, if you have it set to use "spf,
greylist". Patch submitted by Paul Tiemann.
================================
Version 1.28 -- Wed Sep 12, 2007
Queue-id was not getting set for some paths through the code. Caused
tracebacks in the mail log file. Reported by RStachowiak and George Sexton
================================
Version 1.27 -- Thu Jun 14, 2007
Patch from Scott Kitterman which changes the capitilization to hopefully
prevent problems with future versions of SPF.
================================
Version 1.26 -- Sun Jun 10, 2007
Paul Tiemann reported problems with the location of SPF import and syslog
logging.
================================
Version 1.25 -- Sat Jun 09, 2007
Patch from Scott Kitterman to use the pySPF v2.0 RFC-4408 check code.
More patches from Scott Kitterman:
Refactored SPF code for when using SPF2.
Changed logging to match RFC-4408 SPF-Received terminology.
Fixed processing to skip SPF for localhost connections to work for IPv6.
Implemented prepending of SPF-Received: header.
Changed skip local connections to use CIDR match rather than string.
Log non-fail/error results to syslog
Defer on temperror
Reject on permerror
Check HELO for null Sender (Mail From)
Patch from Joshua J. Kugler to greylist only by IP address (not by
IP+sender+recipient).
Patch from Carl Brewer for "tumgreyspf-addip" to easily whitelist IP
addresses.
================================
Version 1.24 -- Wed Nov 29, 2006
Patch from Scott Scriven to fix the tumgreyspf-stat+ignoreLastByte issues.
================================
Version 1.23 -- Tue Nov 28, 2006
README changes sent in by Leni Mayo and Radoslaw Stachowiak.
Skip SPF lookups for mail originated from 127.*. Patch by Scott Kitterman
Patch to tumgreyspf-stat to work with "ignoreLastByte", reported by
Radoslaw Stachowiak and others.
SPF reject message now has "SPF Reports:" prepended to it so that it's more
obvious that the rejection is due to SPF. Based on suggestion by
Radoslaw Stachowiak.
Install script bug fixed, as reported by "Herman".
================================
Version 1.22 -- Tue Sep 04, 2006
tumgreyspf-clean will now expire initial entries after 12 hours if they
haven't connected again. Patch by Jeff from Rockville.
================================
Version 1.21 -- Tue Aug 29, 2006
In the case of an SPF reject, return 550 instead of REJECT, in compliance
with the RFCs. Found and patch provided by Scott Kitterman.
Fixed a thinko and changed link to SPF site, patch by Scott Kitterman.
Changing the documentation, removing "advanced" settings, based on
questions by yann shukor.
Made the OSError exception trap more picky. Patch by Mike Meyer.
================================
Version 1.20 -- Tue Jun 27, 2006
Fixing tumgreyspf-stat.
Try making greylisting data directory several times if we get OSError.
This helps work around a race condition. Reported by Mike Meyer.
================================
Version 1.19 -- Wed Jun 07, 2006
Mike Meyer noticed that unnecessary data was being written to the greylist
directory, potentially using unnecessary data blocks. Corrected.
================================
Version 1.18 -- Tue May 30, 2006
Changed tumgreyspfsupp.py so that defaultConfigFilename is consistent with
example settings in other files. This only impacts users who are not
installing via the RPM. Reported by Luis Botero
================================
Version 1.17 -- Tue Mar 21, 2006
Changing the __default__.dist file to list SPF first, since the
documentation recommends it be set that way.
Suggested by Benjamin Derry.
Changing the spec file so that the cron.d file is mode 644. Reported by
Stephen Warren.
================================
Version 1.16 -- Fri Feb 24, 2006
1.15 had a bug in indentation. Ugh. Reported by Benjamin Derry.
Adding a README-RPM with instructions for after the RPM install.
Suggested by Benjamin Derry
================================
Version 1.15 -- Sat Feb 18, 2006
Adding a link to the greylisting URL in the initial greylist message.
================================
Version 1.14 -- Sun Feb 12, 2006
Fixing a bug with SPF checking and a traceback. Reported by Simon Bellwood.
================================
Version 1.13 -- Sun Feb 05, 2006
Another patch from Scott Scriven to fix the tumgreyspf-clean program for
the "ignoreLastByte" patch from Thursday.
================================
Version 1.12 -- Thu Feb 02, 2006
A patch from Scott Scriven which implements a new setting,
"ignoreLastByte". When set, the last byte of the IP address is
ignored so that mail servers in a pool of the same /24 network block
can more easily get mail through. This defaults to off.
================================
Version 1.11 -- Sat Oct 01, 2005
Adding documentation about file-system problems when using ext2/ext3
and how to avoid them.
================================
Version 1.10 -- Fri Sep 30, 2005
defaultSeedOnly was not implemented, Sean E. Millichamp provided a patch to
implement it.
Some SPF versions return "deny" instead of "fail". Sean E. Millichamp
supplied a patch which treats both responses the same.
================================
Version 1.09 -- Wed Aug 31, 2005
Changing the install instructions to use different syntax for the main.cf
file. (Reported by Ferdinand Schmid)
Modifying the python version used by the programs. System was using
"python2.2", changed to just use "python".
(Reported by Ferdinand Schmid)
================================
Version 1.08 -- Wed Apr 27, 2005
Changed the regex used for processing the files, fixing problems with
addresses that have "=" in them. Fix provided by Stephen Warren
================================
Version 1.07 -- Wed Apr 27, 2005
Debugging in tumgreyspf could cause tracebacks due to logging the wrong
value. Fix provided by Stephen Warren.
================================
Version 1.06 -- Thu Apr 15, 2005
Changing the install script to indent second line of master.cf file
(reported by Stephen Warren)
Got a report from Stephen Warren that "tumgreyspf-install" does not work in
a number of ways with his pre-existing postfix configuration files.
I've changed the README to recommend doing a manual install instead
of automatic.
================================
Version 1.04 -- Thu Apr 14, 2005
Changed the README to reflect GPL status.
================================
Version 1.03 -- Tue Mar 15, 2005
Added LICENSE file for GPL.
================================
Version 1.02 -- Wed Nov 10, 2004
Adding blackholing.
Fixed a bunch of bugs in the install process and spec file which Kevin
Fenzi found. Thanks.
================================
Version 1.01 -- Mon Aug 23, 2004
Fixing a bug in tumgreyspf-install related to updating the time_limit
================================
Version 1.00 -- Sun Aug 22, 2004
Extensive documentation.
Added tumgreyspf-install.
Added tumgreyspf-stat to show status of greylist data directory.
Config file name can now be specified as argument to program.
Split common routines out into tumgreyspfsupp.
Added "tumgreyspf-clean".
Added a README.performance file based on my testing.
Added "tumgreyspf-configtest" program, which can be used to test a
configuration file without having to wait for tumgreyspf to be fired off
and log the config file failure.
Added a master config file, /etc/tumgreyspf.conf
No configuration of the main program is necessary now.
Greylist data file ctime/atime is now updated when a new message comes in.
Moving ip data from "data" into "data/client_address".
Adding a log entry for when a message is accepted by greylist.