![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / mail / p5-razor-agents
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
mail: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes The following distfiles were unfetchable (possibly fetched conditionally?): ./mail/qmail/distinfo netqmail-1.05-TAI-leapsecs.patch
mail: Remove SHA1 hashes for distfiles
Add SHA512 digests for distfiles for mail category Problems found locating distfiles: Package mutt: missing distfile patch-1.5.24.rr.compressed.gz Package p5-Email-Valid: missing distfile Email-Valid-1.198.tar.gz Package pine: missing distfile fancy.patch.gz Package postgrey: missing distfile targrey-0.31-postgrey-1.34.patch Package qmail: missing distfile badrcptto.patch Package qmail: missing distfile outgoingip.patch Package qmail: missing distfile qmail-1.03-realrcptto-2006.12.10.patch Package qmail: missing distfile qmail-smtpd-viruscan-1.3.patch Package thunderbird24: missing distfile enigmail-1.7.2.tar.gz Package thunderbird31: missing distfile enigmail-1.7.2.tar.gz Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
Fix build with perl-5.22. From Petar Bogdanovic on pkgsrc-users.
Changed implied dependency for INST_MAN5DIR into explicit dependency. Submitted upstream as bug 2921151.
Updated to version 2.85. Pkgsrc changes: - Submitted patch-aa upstream. - Added LICENSE. - Put PKG_INSTALLATION_TYPES and PKG_DESTDIR_SUPPORT in section 4 of Makefile. - Shut up a pkglint warning about quoting. Changes since version 2.84: =========================== 2.85 (July 21, 2008) Relicense under Artistic License 2.0. See LICENSE for details.
Updated to version 2.84. Pkgsrc changes: - none Changes since version 2.83: =========================== 2.84 (May 10, 2007) Update discovery hostname.
Updated to version 2.83.
Pkgsrc changes:
- p5-Net-DNS not needed anymore.
Changes since version 2.82:
===========================
2.83 (May 8, 2007)
* Remove all uses of $' from code. This removes a global regex engine
slowdown. [issues.apache.org #5312]
* Comment out or replace shell commands with Perl equivalents. This
removes the prerequisites of uname(1) and GNU mkdir(1).
Introduced a variable to Makefile.PL (see patch-aa) for the correct handling of PKGMANDIR.
Updated to version 2.82.
Pkgsrc changes:
- Added CHECK_INTERPRETER_SKIP to disable checks of some *.pm files.
Relevant changes since version 2.77:
====================================
2.82 (May 26, 2006)
· Always disconnect from discovery server after performing discovery.
This fixes a long standing bug wherein razor-report and razor-check
would attempt to report to or check against the discovery servers.
2.81 (Mar 16, 2006)
· Update service policy.
2.80 (Feb 27, 2006)
· Untaint filenames loaded from the config file. [Bug #1395719]
2.78 (Oct 01, 2005)
· When registering with a username and password, accept existing cre-
dentials if they authenticate successfully.
· When autoregistering, attempt to write a test identity before
attempting to register credentials.
· Always remove the existing identity symlink before overwriting, as
-e $fn can return false for a symlink that still exists.
· Ensure that checks and reports are sent to the appropriate servers.
[Bug #1267559]
Updated to version 2.77.
Pkgsrc changes:
- Archive is only available as .tar.bz2.
Changes since version 2.72:
===========================
2.77 (Aug 15, 2005)
* Fix to a broken bunzip archive.
2.76 (Aug 15, 2005)
* When no reporter identity is found, attempt to register
automatically.
* When -home is specified on the command line, default
"global_razorhome" to the provided value. [Gentoo #101070]
2.75 (July 6, 2005)
* Removed two debugging statements accidentally checked into 2.74.
* Applied syslog patch from Debian bug #295727 to reintroduce support
for 'sys-syslog' and 'syslog' log targets. [Feature #1229433]
* Modified Makefile.PL to honor DESTDIR when installing section 5 man
pages. [Bug #1227167]
* Fixed failure for razor-agents to exit with error when unknown
parameters were specified. [Bug #1229450]
* Fixed bug for when razor-agents was invoked without ``-f'' but
reading from STDIN, causing the shell to be unusable until the
forked background process was killed off. [Bug #1229887]
2.74 (June 28, 2005)
* Fixed handling of configuration options; under certain
circumstances, neither the defaults nor the configuration file would
set necessary variables such as "listfile_discovery".
* Fixed handling of -home option; when provided, it will be accepted
without further checks.
* Fixed installation of man(5) pages by non-root users to local man
directories. [Patch #1227162]
* Reverted a patch that was intended to add support for overriding
razorhome under certain circumstances. The patch introduced new
issues with external program integration (eg. Amavis). [Bug
#1074391]
* Corrected a spelling error in a debug message.
* Added several defined checks to avoid unnecessary warnings when
manipulating server lists.
* Corrected the preprocessing fix shipped with 2.70 and updated the
test suite to match. [Bug #1001417]
* Updated preproc implementation (deHTMLxs) to match other clients.
Update to version 2.72.
Patch-aa is no longer necessary (creation of correct symlinks to
"razor-client").
This release fixes two recently discovered DoS vulnerabilities: Certain
HTML messages could crash the process and a bug sometimes caused server
discovery to go into an infinite loop.
Changes since version 2.67
==========================
2.72 (June 16, 2005)
+ "razor-client" no longer creates symlinks to itself
upon installation; four new scripts have been added to
the distribution to replace this functionality
("razor-admin", "razor-check", "razor-report",
"razor-revoke").
2.71 (June 15, 2005)
+ A fix to Makefile.PL script to correctly invoke
"razor-client" after installation. Thanks to Liam
Quinn for the patch.
2.70 (June 10, 2005)
+ Fixed preprocessing of unusual HTML messages. This
resolves the segfault issue in razor-agents. [Bug
#1001417]
+ Fixed handling of certain malformed headers.
+ Explicitly specify the record separator as "\n" when
reading files, to ensure that someone else hasn't set
it to undef. [Patch #537813]
+ "razorzone" is no longer supported and has been
removed from the documentation.
+ Allow the config file to set razorhome. [Bug
#1074391]
+ Razor Agents no longer go into an infinite loop when
discovery fails. [Bug #1016039]
+ Properly creates "razor-*" symlinks after installa-
tion. [Bug #874468]
+ Default to PERLPREFIX instead of PREFIX when
installing man5 pages. [Bug #1001320]
+ Removed a call to $sha1->reset() which was breaking
SHA1 calculation. [Bug #1004858]
+ "use_engines" is no longer supported and has been
removed from the documentation. [Bug #1120311]
+ Shuffle the discovery, catalogue, and nomination
server lists after loading them from disk; this pre-
vents razor-agents from always starting with the same
catalogue server.
+ Replace the complex DNS lookup logic for discovery
servers with a single DNS round robin. [Bug #604679]
+ Remove the ICMP ping logic for finding the "fastest"
catalogue server; the configuration option for this
logic is now ignored. [Support #739464]
+ Removed stale engine code for various signature types
that are no longer used.
Update to version 2.67
This also fixes PR pkg/29991.
--
Changes since 2.40:
===================
2.67 (December 03, 2004)
+ This is a patch release that fixes a bug in the
Whiplash signature scheme. The bug was in the new code
added to support canonicalization of domains. It
caused the signature algorithm to generate no signa-
tures on valid content.
2.66 (December 02, 2004)
+ Introduced support for country domain canonicalization
in the Whiplash signature scheme. This means domains
like foo.co.uk would be extracted correctly by
Whiplash. This change affords a considerable improve-
ment in accuracy.
+ Modified the revocation logic to do signature-only
communications with the server. All versions of
razor-agents prior to this sent the entire message on
razor-revoke, and even though the backend would drop
the messages after computing signatures, this entailed
a privacy risk. From this version on razor-agents will
_never_ send the contents of a revoked message to the
backend servers.
+ Fixed a bug in "se" (supported engines) computation,
which was broken when the "se" mask was larger than 8
bits. This would sometimes disable the use of engine 4
(ehash). This fix would also afford an increase in
accuracy due to ehash being used everytime.
+ Fixed a bug in report by message. Version 2.61 would
drop MIME headers on certain spam messages which would
cause the backend to ignore these messages as mal-
formed.
2.61 (July 06, 2004)
+ Introduced the Whiplash signature scheme. Whiplash
signatures are based on canonical domain names present
in URLs embedded in spam messages. A Whiplash signa-
ture is also a function of the length of the spam mes-
sage. It's important to note that not all whiplashes
are used as classifiers. The Whiplash engine is aug-
mented by sophesticated logic on the Razor2 backend to
select the Whiplashes that are used to filter spam.
+ Fixed a bug in MIME parser whereby some broken MIME
mails were invisible to the system. [Bug #788723]
+ We override the "use_engines" parameter in the config
file because this version supports different engines
but leaves the config file untouched. [Bug #984374]
+ Engine 1 support completely removed. Engine 1 was a
signature scheme compatible with the old razor v1 sig-
natures, which is no longer supported on the backend.
[Bug #975490]
Add RMD160 digests.
Update to version 2.40
No longer dependent on Digest::Nilsimsa
External taint patches no longer necessary.
Changes since 2.36
* Applied another Makefile.PL patch from Michael Schwern to correctly
install manpages in part 5 of the manual set in various versions of
perl.
* Applied patch from Mark Martinec and Vivek Khera of Amavisd to
untaint various file targets obtained from user input. This is the
same patch pointed to by the SpamAssassin FAQ
[http://www.spamassassin.org/released/Razor2.patch]
* Support for HTTP 1.1 tunneling [SF patch #821324] by Jon Schewe.
* Applied Anne Bennett's patch to Logger.pm to introduce a new log
target, "syslog-sys", that talks to Syslog over a Unix socket rather
than a TCP socket.
* Applied Anne Bennett's patch to deHTML.xs to get rid of the type
mismatch warning.
* Removed computation of signatures that are no longer supported by
the backend -- engines 1, 2 and 3. Digest::Nilsimsa no longer
required by Razor Agents.
New version 2.36. It'a leaf package and 2.36 fixes a build problem Grant
Beattie encountered on Linux.
Relevant changes sinc 2.22:
o Better compatibility of Makefile.PL with new MakeMaker
o C Code compiles with C compilers other than GCC.
o Detect and skip body parts that only contain MIME headers.
o Fixed a bug where razor-check would terminate prematurely
on messages for which it could not compute a signature.
o Introduced SOCKS support. Net::SOCKS is required in
order to use SOCKS. Specify socks_server in the config file.
o Fixed a bug where the MIME boundary was being spuriously set
in certain cases.
o A bug in the selection of zone prefixes in bootstrap
discovery was fixed.
o Razorhome is gleaned from the config file passed to
razor-agents, if all else fails. "razor-report
-conf=/etc/razor/razor.conf spam" will use /etc/razor
as its home if no other home is found (eg in
$HOME/.razor). To force a particular Razorhome value,
use the -home=path option.
o Force bootstrap discovery when all discovery servers are
unavailable. This fixes a bug where by razor-agents would
try to connect to the old Razor2 discovery server found in
servers.discovery.lst.
Get rid of pesky *.orig files
Improve behaviour of Razor2 when running in taint mode. Fixes come from the SpamAssassin 2.60 release (originally from http://www.ijs.si/software/amavisd/ (Thanks to amavisd-new, Mark Martinec, and Vivek Khera!))
Update to current Razor2 release.
======== Changes since v 2.14 =========================================
2.22 (Nov 21 2002)
* Turned off verbose logging in ehash that was left on by mistake.
[vipul]
* Some user contributed additions to the FAQ.
2.21 (Nov 19 2002)
* Ephemeral Hash reverts to the entire content when both sections are
composed of whitespace. This makes a certain type of false positives
go away. [vipul]
* Razor2::Client::Core skips whitespace only message parts. [vipul]
* DebugLevel 15 prints out the content after preprocessing, just
before the signatures are computed. [vipul]
2.20 (Oct 15, 2002) (First Stable Version)
* If log file isn't writable for whatever reason, we write logs to
/dev/null. [vipul]
* We look for stray "\r"'s in the split_mime function. Thanks to Jim
<jim@ironchicken.org> for pointing this out. [vipul]
* Added a significantly faster XS version of deHTML code. [vipul]
* Made ::Agent taint friendly. [vipul]
* Added support for passing an already open filehandle to
"::Agent::checkit()" and "::Agent::parse_mbox()" [vipul]
* Made logic_method 4 the default. [vipul]
* Added Razor2::Syslog to the package. [vipul]
Update to 2.14 Changes: - almost a complete (compatible) rewrite of Razor v1. - uses new (fuzzy) signature algorithms to better spot 'mutating' messages - Spam reports are now validated based on 'reputation' of the submitter in order to make it easier to eliminate false positives. - Registration for submitters required. - Revocation of spam reports is now possible.
Import p5-razor-agents-1.19. Vipul's Razor is a distributed, collaborative, spam detection and filtering network. Razor establishes a distributed and constantly updating catalogue of spam in propagation. This catalogue is used by clients to filter out known spam.
Initial revision