summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-10-29Track ACL context through ${acl expansions. Bug 1305.Jeremy Harris
Rather than pass "where" around all the string-expansion calls I've used a global; and unpleasant mismatch with the existing "where" tracking done for nested ACL calls.
2012-10-28Quieten complaining compilers.Jeremy Harris
2012-10-27Update testsuite outputs to match 333b9d.Jeremy Harris
2012-10-264.81 to 4.82Phil Pennock
Avoiding confusion of 4.80.1 vs 4.81, we went with skipping to 4.82 instead.
2012-10-26Merge 4.80.1 security fix in.Phil Pennock
Merge commit '4263f395efd136dece52d765dfcff3c96f17506e' Amendment to ChangeLog to handle changes.
2012-10-25Merge branch 'master' of git://git.exim.org/eximJeremy Harris
2012-10-25Save/restore $acl_arg1 ... across acl calls, making them local variables.Jeremy Harris
2012-10-24SECURITY: DKIM DNS buffer overflow protectionPhil Pennock
CVE-2012-5671 malloc/heap overflow, with a 60kB window of overwrite. Requires DNS under control of person sending email, leaves plenty of evidence, but is very likely exploitable on OSes that have not been well hardened.
2012-10-17Example tune for clarity (reverse_ip)Phil Pennock
Use a last octet which will highlight the hex nature in the example. > ${reverse_ip:2001:0db8:c42:9:1:abcd:192.0.2.127} f.7.2.0.0.0.0.c.d.c.b.a.1.0.0.0.9.0.0.0.2.4.c.0.8.b.d.0.1.0.0.2
2012-10-15Merge branch 'master' of ssh://git.exim.org/home/git/eximTodd Lyons
2012-10-15Adjust debug output to indicate a test, not resultTodd Lyons
2012-10-15Note post-DATA ACL ordering.Phil Pennock
DKIM, then MIME, then DATA. (Also CHID12 -> CHAPdkim)
2012-10-14Avoid reset of store pool in expand when a ${acl is used; it may have ↵Jeremy Harris
side-effects that must be persistent.
2012-10-06Doc fix: log field M8S=, in details sectionPhil Pennock
2012-10-06Move Wolfgang's ack to current sectionPhil Pennock
2012-10-06Logging-only patch for 8BITMIME; bug 817.Jeremy Harris
2012-10-05Add smarthost Router to default config, commented-out.Phil Pennock
This is a very common requirement for the portion of the user-base who need the most assistance.
2012-10-04Add expansion variable $headers_added returning newline-sep list of headersJeremy Harris
added in ACLs. Bug 199.
2012-10-04Strip leading/trailing newlines on list of headers for addition; bug 884.Jeremy Harris
NB: this means a bare "X-ACL-Warn:" header is harder to add.
2012-10-03Releases signed by Phil's key, not Nigel's.Phil Pennock
State a more general policy of PGP signing, mention trust paths, cite the main public keyserver pool, provide a link to a trustpath display between Nigel's key and Phil's. Provide Phil's current PGP keyid (noting will change in 2013). Bounce via a redirector, on Phil's security site, because: (1) xfpt barfs on &url(..) where the URL contains an ampersand (2) No ampersands means less debugging across various platforms (3) The redirector is https: with a public cert, where www.exim.org does not have a cert (with that name, at this time). All keys cited in 0xLong form (16 hex characters). Nits: (1) URL is given with https:// on one line, the rest on the next (2) using alt text does not give the URL in the .txt format, despite the docs, because we build .txt from w3m -dump, so the HTML form is used. (3) Ideally, we'll get around to having https://www.exim.org/ exist and be usable for this redirect. Side-effects: (1) My name is in The Spec for the first time. :)
2012-09-27Unbreak non-ipv6 build.Jeremy Harris
My commit 3a7963704c519 broke compilation without HAVE_IPv6. Rework.
2012-09-24Add doc caveats on cutthrough-delivery vs. verify-mode routers.Jeremy Harris
2012-09-24Fix expected test output file with return before linefeed.Jeremy Harris
2012-09-17Typo in debug output.Todd Lyons
2012-09-11Minor doc nits re bug 1262.Phil Pennock
Update src comment to be clearer about why it's safe for "state of this transport" to affect other deliveries. Mention change in externally observable state in README.UPDATING. Reference bugzilla entry in ChangeLog. Update Paul's credit in ACKNOWLEDGMENTS.
2012-09-11Avoid using a waiting db for single-message-only transports. PerformanceJeremy Harris
bug 1262 and patch from Paul Fisher. Testcase 0288 exercises.
2012-09-09Update manual on the logging of cutthrough-mode deliveries.Jeremy Harris
2012-09-05minor nits.Phil Pennock
Some whitespace changes; 4.73 item 8: bool_lax{} is an expansion condition, not e. operator. Fix a comma to a period.
2012-09-05Add dnsdb lookup pseudo-type "a+". Addresses bug 1269.Jeremy Harris
2012-08-27Bugtrack 1290 - Spec grammar fixes.Todd Lyons
Submitted by Regid.
2012-08-16Bugtrack 1285 - Add docs for omitted dkim_disable_verify.Todd Lyons
Fixed spec docbook file to pass validation when building spec.txt. Adjust Makefile to not delete html, but not version controlled index.html.
2012-08-15Bugtrack 1283 - Spec typo fix.Todd Lyons
2012-08-14Bugtrack 1281 - Spec typo fix.Todd Lyons
2012-07-27Fix trailing whitespaceTodd Lyons
2012-07-27Fix trailing whitespace in STDOUT file.Todd Lyons
2012-07-27Bug #198: Add remove_header ACL modifier.Todd Lyons
Used patch from Magnus Holmgren dated 2007-02-20. Added documentation. Added tests to detect proper operation.
2012-07-19Add example ACL usage of ${run in exim spec.Todd Lyons
2012-07-16Doc fixes from Regid Ichira & Andreas MetzlerPhil Pennock
2012-07-12Doc note re 9999 days & 32bit time (SSL certs)Phil Pennock
Thanks to Jay Rouman for highlighting that there can be rollover. I have chosen *not* to reduce the duration, but to leave it and instead provoke thought on the part of those deploying systems, if this bites them.
2012-07-09Add CONTINUE to runtest scriptTodd Lyons
2012-07-08Add check for inlist and !inlist in test 0002.Todd Lyons
2012-07-08Merge branch 'master' of git://git.exim.org/eximJeremy Harris
2012-07-08Multiple headers_add/remove options per router/transport - fixes bug 337Jeremy Harris
2012-07-06Make +smtp_confirmation be a default logging option.Todd Lyons
2012-07-05Fix bug 1267 - inlist/i were ignoring negation.Jeremy Harris
Fix the acl condition also; and make editor brace-matching a little better.
2012-07-05Delay expansion of smtp transport option "authenticated_sender"Jeremy Harris
after connection startup, to match documentation - bug 1144.
2012-07-02Include the static files within the HTML documentation dirNigel Metheringham
2012-07-01Merge branch 'acl'Jeremy Harris
2012-06-27git/ACKNOWLEDGMENTS: coerce charset of git toolsPhil Pennock
github seems to assume content is 8bit.
2012-06-27Acl expansions: tests and documentationJeremy Harris