amavisd-new-docs-2.11.1-lp150.5.3.1<>,l\vqN/=„_mߓFq}գH-7 +P x_>BA>F Oq'O4GPfִd?'P7>|n# Ժ(5x@ ~ W7͂9JssG~Ĉj2/{8FE< C۠JawV=.wP_z^S\BS{.N*Bԥ"进W6K|`T[t?iYvV?u5toA>MOax7{ae$=)GhFcFpU>>?d & b<@HL_hy EE fE E E IE EEEVE3(O8X,9,:,FGEHEI(EXpYx\E]E^+bwc defluEvz(04:|Camavisd-new-docs2.11.1lp150.5.3.1Documentation for the High-Performance E-Mail Virus ScannerAmavisd-new is a high-performance interface between mailer (MTA) and content checkers: virus scanners or SpamAssassin. It talks to the MTA via (E)SMTP, LMTP. This package contains the documentation and Release-Notes.\vqNlamb08!&openSUSE Leap 15.0openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgDocumentation/Otherhttps://amavis.org/linuxx86_64 U(,w, E"].&vC30 D/Q_I)gmUhpvIi5ioa^Y\cXeeD.~l>W }a9 A큤A큤A큤A큤A큤\vqMR\vqAAN+KB;Bl'EDMV Bl(Bl(D C#5B䯚N M~JBl(BBl(G!=G!oMiBl(E C1PeVro@suse.dewr@rosenauer.orgwr@rosenauer.orgwr@rosenauer.orgvarkoly@suse.comopensuse@cboltz.devarkoly@suse.comwr@rosenauer.orgcrrodriguez@opensuse.orgmeissner@suse.commlin@suse.comaj@ajaissle.dewr@rosenauer.orgdmueller@suse.comvarkoly@suse.comchris@computersalat.devarkoly@suse.comvarkoly@suse.comvarkoly@suse.comwr@rosenauer.orgvarkoly@suse.comvarkoly@suse.comjengelh@medozas.devarkoly@suse.comvarkoly@suse.comvarkoly@novell.comvarkoly@suse.devarkoly@novell.comcoolo@novell.comvarkoly@novell.comvarkoly@novell.comvarkoly@suse.de- update to version 2.11.1 * removed a trailing dot element from @INC, as a workaround for a perl vulnerability CVE-2016-1238 * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR for a message "PID went away", and removed redundant newlines from some log messages * safe_decode() and safe_decode_utf8(): avoid warning messages "Use of uninitialized value in subroutine entry" in Encode::MIME::Header when the $check argument is undefined * @sa_userconf_maps has been extended to allow loading of per-recipient (or per-policy bank, or global) SpamAssassin configuration set from LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with 'ldap:' will load SpamAssassin configuration set using the load_scoreonly_ldap() method; a patch by Atanas Karashenski * add some Sanesecurity.Foxhole false positives to the default list @virus_name_to_spam_score_maps * updated some comments - update amavis-milter to version 2.6.1 * Fixed bug when creating amavisd-new policy bank names- bsc#1072122 amavisd-new should use unar instead of unrar- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for starting service amavis. amavisd-new should require spamassassin- bnc#1007149 Amavisd-milter fails to start when started via systemd Use fillup_only with -n amavis- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- fixed DKIM signing by recognizing ORIGINATING (regression in 2.11.0) (dkim-signing.diff) (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)- Don't require insserv if we don't need it.- Update to version 2.11.0 + Bugfixes * delivery method was undefined when always_bcc was used; reported by Marieke Janssen; * avoid warnings issued by perl 5.21.7 and later: Negative repeat count does nothing at ./amavisd line 16408 and similarly in amavisd-status; * releasing from an SQL quarantine failed to provide the original envelope sender address to a released message; reported, and a fix suggested by Tom Johnson and Tobias; * remove a stale database file __db.nanny.db on a reload or restart, as it can prevent a successful start when a previous start failed for some reason; a patch by Trent Lloyd; + Compatibility * During startup more detailed testing is performed for taint bugs of a module Encode and the function utf8::is_utf8(), which may produce warnings on old versions of perl with its old core module Encode, or may exit on detecting more sinister bugs in these modules. Note that the module Encode may be upgraded independently of perl, if desired; * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields msgs.subject and msgs.from_addr, as previously some of the UTF-8 characters could not be stored in a database; * when logging to stderr a timestamp prefix to each message is only still inserted if $DEBUG is true. When $DEBUG is false each message is prefixed with a syslog log level in angle brackets, and a timestamp is omitted (for compatibility with systemd); * a perl module Digest::SHA is now a required module. It is a perl core module since perl 5.10, so it shouldn't introduce a new dependency, and it was a de-facto required module even previously, as it was needed for DKIM processing; + New features * Polished rough corners to facilitate running amavisd as a non-daemonized supervised process * A log template macro 'report_json' can now take arguments, which can include or exclude fields (key/values) from the JSON report object. Arguments to a macro are either field names (keys) to be included in a report, or are field names to be excluded, each prefixed with an exclamation mark, to produce a report with all but excluded fields. * Two new configuration settings are added: %smtpd_tls_server_options and %smtp_tls_client_options. These two associative arrays are passed to IO::Socket::SSL->start_SSL when establishing a server-side or a client-side TLS session with an MTA, and provide more control over a TLS session - like providing certificates and restricting ciphers. See documentation of a perl module IO::Socket::SSL for a list of all options with their descriptions and their defaults. * Supports receiving SMTP/LMTP connections through a HAProxy, recognizing 'PROXY protocol Version 1' data on the first line read, after a connection from HAProxy to amavisd has been established. Connection data (IP addresses and ports) received via this protocol end up replacing such data in the the Amavis::In::Connection object ($conn). Set configuration variable $haproxy_target_enabled (also a member of policy banks) to true in order to enable this protocol. * redis: allow a scoped / link-local IP address specification (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]); * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1, hex) of a decoded (base64 or quoted-printable) MIME part contents, followed by a colon and a lowercased Content-Type of the MIME part. Canonical line endings CRLF in decoded textual parts are normalized to a native newline (\n) before feeding them to a digest algorithm. * Policy bank names in a @client_ipaddr_policy setting can now accept a comma-separated list of policy names to be loaded on a match (for loading of policy banks based on an IP address of a SMTP client). Whitespace around each policy name is allowed and is stripped. Previously only a single policy bank name was allowed in each entry of @client_ipaddr_policy. * Experimental feature: IP lookups (as implemented by lookup_ip_acl() and used by @client_ipaddr_policy) can now also do DNS-based lookups, in addition to array- and hash-based lookups.- Add amavisd-new-2.10.1-myhostname.patch: $myhostname is set using POSIX::uname, but expects a FQDN. This patch changes this behaviour to use Net::Domain::hostfqdn instead- require perl-Convert-BinHex as otherwise startup fails with default installation - file based requirement does not work - > changed to package requirement util-linux-systemd- Update to version 2.10.1 + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8() when SQL is in use + void warnings issued by perl 5.21.5: - Changes from version 2.10 COMPATIBILITY - New requirement: perl module Net::LibIDN needs to be installed. - Uses a perl module File::LibMagic if installed, instead of spawning a file(1) utility. - Support for international email relies heavily on perl to do the right thing in its support of Unicode, so using a reasonably recent version of perl is recommended. Amavisd was tested with perl 5.18 and 5.20.1. Versions of perl older than 5.12 may cause problems with handling, encoding, and decoding of Unicode characters. It is reasonable to expect that versions 5.14 and 5.16 are fine too, but have not been tested extensively. - Default log templates and notification templates have changed in details (like in decoding of international e-mail addresses), so if locally customized templates are in use these will benefit from updating - otherwise expect some mojibake in log and notifications. - International domain names (IDN) encoded in ASCII-compatible encoding found in e-mail addresses and in Message-ID header field will be decoded to Unicode for presentation purposes (syslog, JSON structured log, notifications). This decoding does not affect a mail message itself. - Logging via syslog expects that syslogd (or equivalent) will not clobber UTF-8 octets. It may be necessary to tell syslogd to accept C1 control characters unchanged, e.g. by adding a command line option "-8" to syslogd. Failing to do so may leave logged entries (like sender and recipient address, From, Subject) in international mail garbled or poorly readable in syslog. On FreeBSD one should add: syslogd_flags="-8" to /etc/rc.conf. - Third party log parsers may need updating to accept logs with Unicode characters in UTF-8 encoding. - A SMTP response to an EHLO command will now announce SMTPUTF8 capability by default. BUG FIXES - releasing a message from an SQL quarantine was broken in version 2.9.1 due to introduction of parent_mail_id(); patches provided by Stef Simoens and Gionatan Danti; - if checking of a message was aborted prematurely (like due to a timeout or some fatal error), JSON log could receive a copy of a previous log entry; - prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report (which produced an invalid JSON object and Elasticsearch complaining); - allow SMTP commands MAIL FROM and RCPT TO to accept options without values, as allowed by the RFC 5321 syntax; - in delivery status notification (DSN) the field Received-From-MTA specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed in RFC 3464; - releasing from a quarantine left envelope sender address as '<>' instead of using the address found in a Return-Path header field of a quarantined message, while also logging a warning: Quarantine release $QID: missing X-Envelope-From or Return-Path reported by Pascal Volk; - avoid failure in os_fingerprint or in smtp forwarding in certain cases where the $os_fingerprint_method or $forward_method or $notify_method uses an asterisk in place of a host IP address or port number. The reported error in os_fingerprint (reported by -ben) was: os_fingerprint FAILED: Insecure dependency in socket while running with -T switch at /usr/lib/perl/5.18/IO/Socket.pm line 80 and in SMTP forwarding or notification (reported by Dennis Boone): (!)connect to *:10025 attempt #1: Insecure dependency in socket while running with -T switch at /usr/lib/perl/5.18/IO/Socket.pm line 80. - files LDAP.ldif and LDAP.schema: added a missing attribute amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount; NEW FEATURES - added support for Internationalized Email: * RFC 6530 - Overview and Framework for Internationalized Email * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8) * RFC 6532 - Internationalized Email Headers * RFC 6533 - Internationalized Delivery Status Notifications This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient addresses, and message header section. Feature parity with Postfix version 2.12 (support introduced in development snapshot 20140715). The SMTPUTF8 extension is supported by Gmail since 2014-08-05: http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html - added support for Internationalized Domain Names (IDN) according to IDNA (RFC 5890, RFC 5891; RFC 3490); * A-labels in ASCII-compatible encoding of domain names are converted to U-labels for presentation/logging purposed; * U-labels are converted to A-labels when feeding a mail message to an MTA which does not announce support for SMTPUTF8 extension (instead of rejecting them as invalid mail address); * For lookup purposes an international domain name is converted to ASCII-compatible encoding when used as a query key in DNS lookups and in lookups into hash, list, SQL and LDAP lookup tables (but not in regexp table lookups). These tables are expected to contain domain names in their ASCII representation (ACE). For convenience of config files subroutines idn_to_ascii() and mail_idn_to_ascii() are available, which encode a Unicode domain name to ACE (like ToASCII in RFC 3490); * Many configuration settings may have their domain names in UTF-8. These will be converted to ACE automatically where necessary (e.g. when creating a Received and Authentication-Results header fields, DKIM signatures, mail addresses in notifications, ...). These settings include: $myhostname, $localhost_name, $myauthservid, $mydomain, notification sender and recipient mail addresses ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps), domain names and selectors in DKIM signing keys (in calls to dkim_key() ); - delivery notifications and admin notifications now show the following information encoded as UTF-8 (which is a default $bdy_encoding) in the plain text part of the message: IDN domain names in sender and recipient mail addresses and Message-ID are first decoded to Unicode, Subject and author display names are MIME-decoded; - 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN (international domain names): domain names in DNS zone comments end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE); - new macro 'mail_addr_decode' takes an e-mail address as a string of octets, where a local part may be encoded as UTF-8, and the domain part may be an international domain name (IDN) consisting either of U-labels or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain name. Returns a string of logical characters (Unicode), suitable for notification templates. If the mail address is not a valid UTF-8 string, it is interpreted as ISO-8859-1 (Latin-1). - new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except that the result is a string of octets, only valid as UTF-8 if the provided address was a valid UTF-8 (garbage-in/garbage-out); - new macro 'header_field_octets' is like 'header_field', except that a result is a string of octets in UTF-8 encoding, suitable for a log template; - new macro 'ip_proto_trace_all' expands into a list of information items from a Received header trace; each item consists of a protocol name (the WITH clause) and an IP address, optionally followed by a source port number if known; Example: ESMTP://[2001:db8::143:1]:39141 < ESMTP://2001:db8::25 < esmtps://203.0.113.172 < ESMTPSA://192.168.9.9 or: UTF8SMTP://[203.0.113.172]:51208 < UTF8SMTPSA://192.168.9.9 - new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except that entries with non-public IP address are excluded from the list; 'Received' trace information in $log_verbose_templ and in notifications now include results from this macro call; - new macro 'protocol' evaluates to a protocol name by which a message was received by amavisd, according to RFC 3848 ("Transmission Types Registration") and "Mail Transmission Types" / "WITH protocol types" IANA registration http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA, UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA, UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ... - new macro 'client_protocol' expands into a protocol name by which a message was received from a client by MTA; the information is passed from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP'; - use a perl module File::LibMagic when available, instead of spawning a file(1) utility for classifying contents of mail parts. By using a direct interface to a libmagic library the startup cost of spawning an external process is avoided. Benchmarking shows that using libmagic is significantly faster especially for checking a small number of files - takes 4 ms for checking one file with libmagic vs. 27 ms with a spawned file(1); based on a patch by Markus Benning; OTHER - RFC 6533: recognize a MIME type 'message/global' as similar to 'message/rfc822', and 'message/global-headers' as similar to 'text/rfc822-headers' where appropriate (e.g. in bounce killer); - header validity check now distinguishes 'non-ASCII and invalid UTF-8' from 'non-ASCII but valid UTF-8' characters in a mail header section. By default valid UTF-8 strings in a mail header section are not treated as error even if mail is not flagged as international mail (SMTPUTF8), as these are quite common in practice. To treat non- MIME-encoded UTF-8 in a header section as error the test can be enabled by: $allowed_header_tests{'utf8'} = 1; - ORCPT attribute in SMTP 'RCPT TO' command now accepts the original recipient mail address in any of these encodings: utf-8-address, utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext, as required by RFC 6533; - updated do_cabextract (extraction of Microsoft cabinet .cab archives) to recognize a slightly changed output of cabextract version 1.2; patch by Thomas Jarosch; - adjusted some timeouts to leave more reserve for later stages of mail processing and forwarding; - prefer sanitizing/protecting control characters as hex code (like \x7F) instead of octal (like \177) (e.g. in logging and DSN); - Use dowload Url as source - Add a requirement on perl-Net-LibIDN; new upstream dependency- fix bashism in post script - remove '-e' option of 'echo' command that may be unsupported in some POSIX-complete shells- add /bin/logger as prereq (util-linux split)- update to version 2.9.1 COMPATIBILITY There are no known incompatibilities between versions 2.9.0 and 2.9.1. Additional bugfixes and also: - updated decoding of RAR archives to recognize a changed format in output of 'unrar' utility version 5; based on a patch by amavis17(at)iotti.biz - avoid tempfailing a message if a redis server is down, just log the error and carry on; - some minor logging changes to facilitate troubleshooting; - changes in 2.9 COMPATIBILITY This version drops dependency on a Perl module Redis, and makes dependencies on modules Convert::TNEF and Convert::UUlib truly optional. The following change may affect third-party log parsers: To facilitate forensic log analysis and troubleshooting, log entries 'FWD from' and 'SEND from' at level 1 now carry one additional prefixed information field which is the unique internal mail_id of the message, possibly followed by a parent_mail_id in parenthesis, No other incompatibilities with a previous version 2.8.1 are expected. NEW FEATURES SUMMARY - structured log/reporting to a Redis server in JSON format; - IP address reputation (uses a Redis server); - added two minor content categories to the major ccat CC_UNCHECKED (encrypted (=1) and over-limits/mail-bomb (=2) ); - introduced a by-recipient setting %final_destiny_maps_by_ccat. - update amavisd-milter to 1.6.0 * New features: Added new amavisd-milter option -B which passes value of {daemon_name} milter macro as amavisd-new policy bank name. * Bug and compatibility fixes: Added amavisd-milter.spec for compilation with rpmbuild. Fixed typo which prevents using LDFLAGS on Debian. Fixed missing definition of true and false in libmilter/mfapi.h. - upstream packages as tar.xz -> added xz as BuildRequires to support building for older dists- add some recommended decoders (bnc#754852) - fixed amavisd-milter invocation (bnc#809969) - correctly set clamd socket to (/var/run/clamav/clamd-socket) (bnc#844575) - some spec file cleanup including using optflags for native code- Add real systemd support; add required macros in %post/postun sections and drop sysvinit support on openSUSE >= 12.3- bnc#844575 - amavis received a change where /var/run was replaced with /run still /var/run is present- fix clamd socket location (bnc#809580)- bnc#831556 - naming mismatch for amavis and systemd- update to version 2.8.1 COMPATIBILITY when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an internal messaging protocol, make sure to replace all 0MQ-enabled Amavis components on upgrading amavisd, as the internal protocol has changed slightly, taking advantage of 0MQ multi-part messages for better performance. Affected programs are: amavis-services, amavisd-status, amavisd-snmp-subagent-zmq, and amavisd. NOTE: The Crossroads I/O project (libxs) ceased development on July 2012, to be replaced by nanomsg eventually by the same author. The 0MQ library (libzmq) is currently (2013) the best choice, the preferred library version is 3.2.2 or later along with the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants. The older version 2 of the library, along with an older perl module ZeroMQ, should be fine too, but lacks support for IPv6. amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0 NEW FEATURES SUMMARY * new Redis storage for the "pen pals" feature; * improved IPv6 support; * support for p0f v3; * new macros ip_trace_all and ip_trace_public; * amavisd-status now shows a bar graph display of the number of active processes; * the timing report log entry can show CPU usage at log level 2 if a module Unix::Getrusage is available;- Fix multiple bugs in systemd unit, syslog.target should not be used and Wants must be used instead of requires in most cases.- use %defattr correctly to make /var/spool/amavis not worldreadable.- Install amavisd.service accordingly (/usr/lib/systemd for 12.3 and up or /lib/systemd for older versions).- update to version 2.8.0 - COMPATIBILITY 2.8.0 * removed an old compatibility measure: default value of @banned_admin_maps was changed from: @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin); to a more consistent: @banned_admin_maps = (\$banned_admin); The previous default value of @banned_admin_maps tried to maintain compatibility with versions before the setting was separated from its companion @virus_admin_maps. Now this compatibility is no longer considered necessary and contributes to some confusion, so it was dropped. See 2.4.0 and 2.2.1 release notes for previous changes to this setting. * quarantining to an mbox format file used to include a local time in an mbox separator line, which differs from RFC 4155 and common practices of using an UTC timestamp; a time zone of a timestamp in separator lines is now changed to UTC; - BUG FIXES 2.8.0 * fixed initial evaluation of dynamic (i.e. per policy bank) values of $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts across all declared policy banks; these policy bank entries may be scalars of references to such; * finely adjust a message size for de-stuffed dots according to a size definition in RFC 1870; avoids occasional message size mismatch when using an antispam interface module SpamdClient (implementing client-side of a spamc/spamd protocol); * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount; * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32 to Counter64 for consistency with other *MsgsSize* variables in groups amavisStats 3 and amavisStats 9; - NEW FEATURES SUMMARY 2.8.0 * For monitoring and statistics gathering purposes a new set of utilities and service processes is available based on a message passing paradigm, using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This replaces a functionally similar set of utilities based on a shared BerkeleyDB database, with a benefit of avoiding lock contention altogether. This can bring sigificant speedups, most pronounced on a host with many busy amavisd child processes. * Applied numerous fine-grained optimizations based on a NYTProf profiler results. Optimizations include a reduction in a number of generated Perl opcodes and similar micro-optimizations. This accounts for a large amount of small changes in the code. * Our current statistics (Q4 2011) shows that 80 % of messages are below 30.000 bytes, and 90 % of mail messages are below 100.000 bytes in size. As an optimization, messages below 100 KiB in size are now kept and processed in memory, including passing them more optimally to SpamAssassin 3.4.0. Some file activity is still there, but is much reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk), observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a busy host (with monitoring disabled, so as not to skew a measurement). * Use a module IO::Socket::IP if available, instead of dealing directly with low-level modules IO::Socket::INET and IO::Socket::INET6; * choose more appropriate defaults if running on an IPv6-only host (like connecting to ::1 instead of 127.0.0.1 which may not exist); * amavisd-release now also supports connecting to amavisd over IPv6; * as a debugging aid it is now possible that a late event triggers full logging of earlier events that occurred during processing of a current mail message; * $enable_ldap setting is now dynamic, i.e. can be changed by a policy bank, which makes it possible to selectively disable LDAP lookups per policy bank; * optionally avoid persistent connections to SQL and LDAP servers; * it is now possible to disable calling an external file(1) utility but still have MIME parts decoding enabled; * added support in Amavis::SpamControl::ExtProg for an external spam scanner Bogofilter; * added locking options to @spam_scanners entries, to be used with external scanners which need but do not implement locking of their resources by themselves; * added a global configuration setting $sa_userprefs_file, which is passed on to SpamAssassin as a 'userprefs_filename' parameter at initialization; * added a subroutine iso8601_weekday(), potentially useful with partitioning; * added several new macros available to logging and notification templates;- update to version 2.7.2 * a generated Received header field was missing the 'IPv6:' prefix in the TCP-info component of a 'by' subfield (as required by RFC 5321, section 4.1.3) when amavisd received a message over an IPv6 protocol; (btw, the TCP-info component of a 'from' subfield was correct); * changed data type of an SNMP variable LogRetries from C32 to C64 for consistency with the MIB; * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation lines when searching for a virus name; suggested by Ralf Hildebrandt; * reduce a log level to 5 on a log message: Amavis::IO::RW: Error flushing on close: ... to avoid an innocent but sinister-looking warning when a pipe to a virus scanner is broken and needs to be re-established; reported by Stefan Jakobs * updated an AV entry for 'F-Secure Linux Security' to version 9.14; options updated by Mika Ilmaranta, a patch by Tuomo Soini; * fix a Unix socket compatibility issue with Net::Server versions 2.000, 2.001 and 2.002, where a method NS_unix_path no longer exists. This method was re-introduced for compatibility reasons in 2.003. Reported by Paul MacKenzie;- unarj was dropped from Factory, remove dependency to it- fix the systemd service file- fix build for < 1210- bnc#706257 - amavis failed to start during boot, however it is active- Add systemd scripts- Fix amavisd-milter binary name- obsolete amavisd-milter package- Integrate amavisd-milter- bnc#718025 - amavisd-new 2.7.0 fails to start- Remove redundant tags/sections from specfile- update to 2.7.0 With a synergy of four solutions, using amavisd-new in a pre-queue filtering setup became a sensible / better behaved solution: - old helper programs amavis.c and amavis-milter.c are no longer distributed with the package, along with the whole helper-progs subdirectory. As a milter client please use the more modern 'amavisd-milter' package by Petr Rehor, available at http://sourceforge.net/projects/amavisd-milter/ - the "smtpd_proxy_options=speed_adjust" Postfix option, available since Postfix 2.7.0 (20091101), improves decoupling between SMTP clients and a content filter in a proxy setup, reducing the number of content filtering processes needed for the same mail load. With this option turned on, a Postfix SMTP server receives the entire message before connecting to a before-queue content filter; - a master_deadline option and its API equivalent, available in SpamAssassin since version 3.3.0, allows for time limiting on lengthy rules checking, while still providing results when a time limit is exceeded; this makes it more suitable for time-sensitive setups like a pre-queue filtering setup; - reworked sub-task time limiting in amavisd, along with its counterpart solution in SpamAssassin, makes it better suited to a real-time nature of pre-queue filtering setups, where one has no control over how long SMTP clients are willing to wait at the data-end stage; - a re-purposed command line option 'reload' now does a warm restart, keeping sockets available to an MTA client at all times, thus reducing a chance that an MTA would even notice a content filter's warm restart.- bnc#710289 - amavisd-new: fails rpmlint check non-ghost-in-var-run- Enable clamav as integrated scanner - Enable Avira Antivir personal- update to 2.6.6 - amavisd-release was not sending a 'mail_file' attribute when a quarantined message was a non-compressed file in a single-level directory quarantine - quarantining to SQL was sporadically failing, reporting some unrelated random error (like 'not available' or 'OpenSSL error: header too long'); - avoid a warning "_WARN: Use of uninitialized value in string eq at ... line 275." when an SQL-based white/black-listing is used; - wrap the sql clause SET NAMES 'utf8' so that only a warning at a log level 2 is issued if an SQL server does not understand the command (SQLite, old versions of MySQL) instead of aborting; - when a back-end MTA rejected a message, amavisd would send a non-delivery status notification, but also propagate the reject status back, which is wrong, only one or the other response would be appropriate. A fix also allows choosing either a D_REJECT, D_BOUNCE or D_DISCARD response for such a case, configurable through %final_destiny_by_ccat at a CC_MTA entry, defaulting to D_REJECT;- bnc#663726 - amavisd-new: group of /var/spool/amavis conflicts with av programms- unrar should not be required (non-free software now)- bnc#614316 - amavisd-new: amavisd-new/README.SuSE does not match /etc/amavisd.conf- bnc#600409 - amavisd not starting after system crash because of stale pid file- bnc#521366 - Amavisd-new sends bounces when it isn't allowed to do so (backscatter!) - update to 2.6.4 BUG FIXES - amavisd failed to start when spam scanning was disabled either by @bypass_spam_checks_maps=(1) or by @spam_scanners=(), giving: Can't locate object method "new" via package "Amavis::SpamControl" - several decoders failed to propagate "Exceeded storage quota" exception, so the protection of AV scanners against mail bombs was ineffective; - milter usage (AM.PDP): verbatim header edits inserted a header body of "1" instead of the correct string, for example: "Authentication-Results: 1"; - updated AV entry for BitDefender's bdscan to recognize tabs around a colon in its output; contributed by Steve; - fix parsing of a combined result from DSPAM (option --classify), as earlier versions of DSPAM did not include a signature with a combined result line; - when logging to SQL (pen pals), the msgs.message_id field always received a value '1' instead of a Message-Id, thus making pen pals less effective (only matching on sender/recipient pairs worked, not on message threads) and letting some bounces bypass a bounce killer; bug was introduced with version 2.6.2; - timer was not reset after a persistent failure to connect to a daemonized virus scanner, so a subsequent call to a backup scanner only had 10 seconds available before it was aborted, which was often too short for a command line backup scanner like clamscan; - if a virus scanner interface did not find a name of a virus in the output of a virus scanner (despite noticing infection), the infection was ignored; - added missing /m flags to regular expressions in AV entries (a bug is revealed with Perl 5.10.0; previous versions of Perl happened to work, unintentionally accepting a /m flag if added late during a regexp evaluation); - $banned_namepath_re setting only worked globally, but was not usable in policy banks; - do_uncompress: signal run_command_copy() errors, instead of returning a status, thus allowing decompose_part() to detect 'Exceeded storage quota' or 'Maximum number of files exceeded', and flag mail as CC_UNCHECKED; - if $mailfrom_notify_admin was not specified in a configuration file but defaulted to an e-mail address in $hdrfrom_notify_admin, the following was reported (due to missing angle brackets) on an attempt to submit a notification: (!)SEND via SMTP: virusalert@example.com -> ... 501 5.1.7 Bad sender address syntax (!)FAILED to notify admin: 501 5.1.7 Failed, id=40690-23, from MTA([::1]:10027): 501 5.1.7 Bad sender address syntax Notification was not sent, the rest of the processing was unaffected; - fetch_modules: only suppress the "Can't locate ... in @INC" diagnostics if exactly the requested module is missing, but do show the error if some subordinate module is missing and preventing the requested module to be loaded; - do_unrar: recognize an information line with a '<->'; - fixed a syntax error in LDAP.ldif; - fixed a bug in SpamdClient; NEW FEATURES SUMMARY - provide a true SNMP agent and a MIB, facilitating monitoring the health of a content filtering system, its performance and mail characteristics; - a new AV interface to SMTP-based antivirus scanners; - allow customizing SMTP-status response reason text for blocked messages; - prevent inserting fake copies of certain important mail header fields without breaking a DKIM signature; - added a configuration variable @client_ipaddr_policy, which maps smtp client's IP address lookup lists to a policy bank name. This allows for loading a policy bank based on a client IP address, and generalizes a formerly hard-wired mapping of @mynetworks_maps into 'MYNETS'. - large messages beyond $sa_mail_body_size_limit are now partially passed to SpamAssassin and other spam scanners for checking: a copy passed to a spam scanner is truncated near or slightly past the indicated limit. Large messages are no longer given an almost free passage through spam checks. - supports passing an extra argument suppl_attrib to $spamassassin->parse, as recognized by SpamAssassin 3.3.0, passing a set of DKIM signature objects to a SpamAssassin's plugin DKIM, which saves having to do the same signature verification operation again within a plugin, and provides uncrippled signatures to SpamAssassin even when a large message is truncated by amavisd and only partially submitted to spam analysis; - add global variables $sa_configpath and $sa_siteconfigpath (undef by default), which are passed to SpamAssassin as options 'rules_filename' and 'site_rules_filename' during its initialization call; this makes it easier to run multiple instances of amavisd, each with a different SpamAssassin configuration, using the same amavisd configurations file by taking advantage of option -i; suggested by Noah Baker; - report process resource usage at log level 2 by calling getrusage(1) if a perl module Unix::Getrusage is available;lamb08 1551266126  !"#$%&'()*+,-./0123456789:;<=>?@ABDFH2.11.1-lp150.5.3.12.11.1-lp150.5.3.1amavisd-new-docsMANIFESTREADME_FILESREADME.bannedREADME.chrootREADME.contributedREADME.courierREADME.courier-oldREADME.customizeREADME.exim_v3README.exim_v3_appREADME.exim_v4README.exim_v4_appREADME.exim_v4_app2README.ldapREADME.lookupsREADME.milterREADME.old.scannersREADME.performanceREADME.policy-on-notificationsREADME.postfixREADME.postfix.htmlREADME.protocolREADME.sendmailREADME.sendmail-dualREADME.sendmail-dual.oldREADME.sqlREADME.sql-mysqlREADME.sql-pgamavisd-new-docs.htmlimagesblank.pngcallouts1.png10.png11.png12.png13.png14.png15.png2.png3.png4.png5.png6.png7.png8.png9.pngcaution.pngdraft.pnghome.pngimportant.pngnext.pngnote.pngprev.pngtip.pngtoc-blank.pngtoc-minus.pngtoc-plus.pngup.pngwarning.pngscreen.cssRELEASE_NOTESTODOamavisd.conf-defaulttest-messagesREADMEsample.tar.gz.complamavisd-milter.8.gz/usr/share/doc/packages//usr/share/doc/packages/amavisd-new-docs//usr/share/doc/packages/amavisd-new-docs/README_FILES//usr/share/doc/packages/amavisd-new-docs/README_FILES/images//usr/share/doc/packages/amavisd-new-docs/README_FILES/images/callouts//usr/share/doc/packages/amavisd-new-docs/test-messages//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:9750/openSUSE_Leap_15.0_Update/02370ac82ce25a3bebe6a62c03de1c77-amavisd-new.openSUSE_Leap_15.0_Updatedrpmxz5x86_64-suse-linux   directoryASCII textHTML document, ASCII textHTML document, ASCII text, with very long linesXML 1.0 document, ASCII textPNG image data, 128 x 128, 8-bit/color RGB, non-interlacedPNG image data, 12 x 12, 8-bit grayscale, non-interlacedPNG image data, 12 x 12, 8-bit/color RGB, non-interlacedPNG image data, 24 x 24, 8-bit colormap, non-interlacedPNG image data, 652 x 694, 8-bit/color RGB, non-interlacedPNG image data, 35 x 15, 8-bit colormap, non-interlacedPNG image data, 24 x 24, 8-bit grayscale, non-interlacedPNG image data, 25 x 24, 8-bit grayscale, non-interlacedPNG image data, 15 x 9, 4-bit colormap, non-interlacedPNG image data, 15 x 9, 8-bit grayscale, non-interlacedUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) kܣveamavisd-new2.11.1utf-8ef749cf826f189a98a6cf5a39d7f5204b6fc0a3bc229f4bd22d613c659ed72e1? 7zXZ !t/]"k%R΁qpze@)p -NEe3Ll qq*(Pߑ`H&FF?-`HTwxסZ5I b_Q3i"LfM`\3mpO pi.N~,^FbDw'\4D2)w|0X{j*3 ?׳2HM* >Xn# flsD-+аdk-Y3qstérl(?w:,nveVYIJص[I>o95j3L[Sem"Ё=e4n5xȪ~@<URFGSN1&u)DojC_2$J6lm꾰RbPsV/16LwTL>[nqn-dqP3Wi=sTF^hƫoϼp`lY}$f{4r|A~A[ - [0Xm&B0<й@-1/HC&k(u&E9O7gxHyZMH - e( Gd_oÑF}0 nfٔ(enC(" V^0ުgcoD0U2Lvq)rđY/$v`A24=}WYVл3!%֣Ofq,WGhW%Fo-xogį!tQ Yw2|ڰX%7/"@\c_4FSYU'bc$IJy^˱>y1OVmR($Z $84$[ϓ@ciFLዚOiKwX(rBoUzYw"(yu:8| YZ