Commit Graph

83 Commits

Author SHA1 Message Date
Stuart Gathman 5ad6d321bd Do plain CBV when template missing. 2007-01-04 18:01:11 +00:00
Stuart Gathman d01dc65f39 Use HELO identity if good when MAILFROM is bad. 2006-12-31 03:07:20 +00:00
Stuart Gathman b703031c7e Skip reputation/whitelist/blacklist when rejecting on SPF. Add X-Hello-SPF. 2006-12-30 18:58:53 +00:00
Stuart Gathman 1bc0a4faef Reject on bad_reputation or blacklist and nodspam. Match valid helo like
PTR for guessed SPF pass.
2006-12-28 01:54:32 +00:00
Stuart Gathman 2bea6ad76f Add archive option to wiretap. 2006-12-19 00:59:30 +00:00
Stuart Gathman c9f0c94b92 Reject multiple recipients to DSN.
Auto-disable gossip on DB error.
2006-12-04 18:47:04 +00:00
Stuart Gathman 8f5513a502 SRS domains were missing srs_reject check when SES was active. 2006-11-22 16:31:22 +00:00
Stuart Gathman 87482d5740 Replace last use of deprecated rfc822 module. 2006-11-22 01:03:28 +00:00
Stuart Gathman b227ca6bb0 Update a use of deprecated rfc822. Recognize report-type=delivery-status 2006-11-21 18:45:49 +00:00
Stuart Gathman dd0125b641 Another lame DSN heuristic. Block PTR cache poisoning attack. 2006-11-04 22:09:39 +00:00
Stuart Gathman ea76acdd3d Fix defaults. 2006-10-04 03:46:01 +00:00
Stuart Gathman 33aeefa19f case_sensitive_localpart option, more delayed bounce heuristics,
optional smart_alias section.
2006-10-01 01:44:06 +00:00
Stuart Gathman 3a90a35cbc Support CBV timeout 2006-07-26 16:42:26 +00:00
Stuart Gathman d38cf5885e Handle multi-line headers in delayed dsns. 2006-06-21 22:22:00 +00:00
Stuart Gathman a20eeda04d More delayed reject token headers.
Don't require HELO pass for CBV.
2006-06-21 21:12:04 +00:00
Stuart Gathman 053c32e450 Fail dsn 2006-05-21 03:41:44 +00:00
Stuart Gathman 99396a1eee Fail template, move most header fields into template. 2006-05-21 03:30:06 +00:00
Stuart Gathman 528810c31a Create GOSSiP record only when connection will procede to DATA. 2006-05-17 21:28:07 +00:00
Stuart Gathman eda8680b70 Don't require SPF pass for white/black listing mail from trusted relay.
Support localpart wildcard for white and black lists.
2006-05-12 16:14:48 +00:00
Stuart Gathman afd3e0f042 Check whitelist/blacklist even when not checking SPF (e.g. trusted relay). 2006-04-06 18:14:17 +00:00
Stuart Gathman 6102d641c5 Use re to recognize failure DSNs. 2006-03-10 20:52:49 +00:00
Stuart Gathman d69b805690 Use signed Message-ID in delayed reject to blacklist senders 2006-03-07 20:50:54 +00:00
Stuart Gathman 994bcce7dc Properly report hard PermError (lax mode fails also) by always setting
perm_error attribute with PermError exception.  Improve reporting of
invalid domain PermError.
2006-02-24 02:12:54 +00:00
Stuart Gathman 7f5d8b6b11 Use SRS sign domain list.
Accept but do not use for training whitelisted senders without SPF pass.
Immediate rejection of unsigned bounces.
2006-02-17 05:04:29 +00:00
Stuart Gathman 8d02ab1771 User specific SPF receiver policy. 2006-02-16 02:16:36 +00:00
Stuart Gathman 18759c3698 Remove spf dependency for iniplist 2006-02-12 04:15:01 +00:00
Stuart Gathman 2f533c4591 Use CIDR notation for internal connect list. 2006-02-12 02:12:08 +00:00
Stuart Gathman 56c1cbd0fd Don't check rcpt user list when signed MFROM. 2006-02-12 01:13:58 +00:00
Stuart Gathman ce51034f69 Use CIDR notation for trusted_forwarder iplist 2006-02-09 20:39:43 +00:00
Stuart Gathman 285d4663c9 put back eom condition 2006-01-30 23:14:48 +00:00
Stuart Gathman 1b685fca76 Accelerate training via whitelist and blacklist. 2006-01-12 20:31:24 +00:00
Stuart Gathman 155eb4e675 Do not auto-whitelist autoreplys 2005-12-29 04:49:10 +00:00
Stuart Gathman 28ca3b2837 Expire and renew AddrCache entries 2005-12-28 20:17:29 +00:00
Stuart Gathman 52b0ac9377 Put guessed result in separate header. 2005-12-23 22:34:46 +00:00
Stuart Gathman 8bc182cb37 Move Received-SPF header to top. 2005-12-23 21:47:07 +00:00
Stuart Gathman 15f8b797bf Select neutral DSN template for best_guess 2005-12-09 16:54:01 +00:00
Stuart Gathman 3b544a4076 improve gossip support.
Initialize srs_domain from srs.srs config property.  Should probably
always block unsigned DSN when signing all.
2005-12-01 22:42:32 +00:00
Stuart Gathman 36a7dce2e5 Fix neutral policy. pobox.com -> openspf.org 2005-12-01 18:59:25 +00:00
Stuart Gathman a418f34491 GOSSiP support, local database only. 2005-11-07 21:22:35 +00:00
Stuart Gathman ba5854fc91 Simple implementation of trusted_forwarder list. Inefficient for
more than 1 or 2 entries.
2005-10-31 00:09:41 +00:00
Stuart Gathman eb2e730b5d Don't check internal_domains for trusted_relay. 2005-10-28 19:36:54 +00:00
Stuart Gathman daa1eacff3 Do not send quarantine DSN when sender is DSN. 2005-10-28 09:30:49 +00:00
Stuart Gathman 25b6378631 Consider MAIL FROM a match for supply_sender when a subdomain of From or Sender 2005-10-23 16:01:30 +00:00
Stuart Gathman 3a1c964f0d Configure auto_whitelist senders. 2005-10-20 18:47:27 +00:00
Stuart Gathman 36ae390f01 access.db stores keys in lower case 2005-10-19 21:07:49 +00:00
Stuart Gathman 4c0cf4fb95 Train screener on whitelisted messages. 2005-10-19 19:37:50 +00:00
Stuart Gathman 8f8de8fa97 Auto whitelist refinements. 2005-10-14 16:17:31 +00:00
Stuart Gathman bc516456c1 Auto whitelist feature. 2005-10-14 01:14:08 +00:00
Stuart Gathman ea82d6d608 Release 0.8.3 2005-10-12 16:36:30 +00:00
Stuart Gathman ace3e13685 Always check HELO except for SPF pass, temperror. 2005-10-11 22:50:07 +00:00