diff -Nru postfwd-1.20/debian/changelog postfwd-1.32/debian/changelog --- postfwd-1.20/debian/changelog 2012-01-04 15:36:46.000000000 +0000 +++ postfwd-1.32/debian/changelog 2012-01-04 15:36:47.000000000 +0000 @@ -1,3 +1,39 @@ +postfwd (1.32-1) unstable; urgency=low + + * New upstream release + - new option --save_rates= is able to load and save rate limit counters + to disk on program start and termination. + - the --debugitem="sender=example\.org$" option allows verbose logging for + particular requests + - the debug() action enables verbose logging for certain rules + - nested commands are possible now + - new mail(server/helo/from/to/subject/body) action. + - single cache items can be wiped + - sasl_username is logged if available + - rate limit action is executed, if the first request exceeds the limit + - exceeded ratecounters will not be kept permanently anymore + - rate limits are evaluated at ruleset stage now + - new parser enhancement is able to omit the trailing "\" for multi-line + rules + - new plugin interface (BETA) + - Time::HiRes is used if available + - multiple rate limits for the same items are supported now + - new $$ratecount variable for rate() actions + - new option --keep_rates + - queueid is logged when available + - rate limits fixed + - new --debug class 'cleanup' + - documentation updates and fixes + * Suppress output on restarting via init script (Closes: #636782), thanks + Martin F. Krafft for reporting + * Add hapolicy and manpage into separate binary package + * Reorganize documentation + - Add new files from upstream to documentation + - Changelogs where renamed by upstream + * Bump Standards-Version to 3.9.2, no changes needed + + -- Jan Wagner Wed, 21 Dec 2011 22:27:27 +0100 + postfwd (1.20-1) unstable; urgency=low * New upstream release diff -Nru postfwd-1.20/debian/control postfwd-1.32/debian/control --- postfwd-1.20/debian/control 2012-01-04 15:36:46.000000000 +0000 +++ postfwd-1.32/debian/control 2012-01-04 15:36:47.000000000 +0000 @@ -6,7 +6,7 @@ Homepage: http://www.postfwd.org/ Vcs-Browser: https://scm.uncompleted.org/projects/debian/repository/show/postfwd Vcs-Svn: https://scm.uncompleted.org/svn/debian/postfwd/trunk -Standards-Version: 3.9.1 +Standards-Version: 3.9.2 Package: postfwd Architecture: all @@ -19,3 +19,13 @@ message has been accepted. It allows you to choose an action (e.g. reject, dunno) for a combination of several smtp parameters (like sender and recipient address, size or the client's TLS fingerprint). + +Package: hapolicy +Architecture: all +Depends: ${perl:Depends}, ${misc:Depends} +Description: Balancing and fallback postfix policy delegation service + Hapolicy enables high availability, weighted loadbalancing and a fallback + action for postfix policy delegation services. Invoked via postfix spawn + it acts as a wrapper that queries other policy servers via tcp connection. + The order of the service queries can be influenced by assigning a specific + priority and weight to each service. diff -Nru postfwd-1.20/debian/hapolicy.docs postfwd-1.32/debian/hapolicy.docs --- postfwd-1.20/debian/hapolicy.docs 1970-01-01 00:00:00.000000000 +0000 +++ postfwd-1.32/debian/hapolicy.docs 2012-01-04 15:36:47.000000000 +0000 @@ -0,0 +1,4 @@ +doc/hapolicy.html +doc/hapolicy.txt +tools/hapolicy/hapolicy.* +tools/hapolicy/hapolicy[0-9a-zA-Z.]* diff -Nru postfwd-1.20/debian/hapolicy.manpages postfwd-1.32/debian/hapolicy.manpages --- postfwd-1.20/debian/hapolicy.manpages 1970-01-01 00:00:00.000000000 +0000 +++ postfwd-1.32/debian/hapolicy.manpages 2012-01-04 15:36:47.000000000 +0000 @@ -0,0 +1 @@ +man/man8/hapolicy.1 diff -Nru postfwd-1.20/debian/postfwd.docs postfwd-1.32/debian/postfwd.docs --- postfwd-1.20/debian/postfwd.docs 2012-01-04 15:36:46.000000000 +0000 +++ postfwd-1.32/debian/postfwd.docs 2012-01-04 15:36:47.000000000 +0000 @@ -1,3 +1,6 @@ -doc/postfwd.html -doc/postfwd.txt -doc/CHANGELOG2 +doc/postfwd2.CHANGELOG +doc/*.html +doc/*.txt +tools/*.pl +tools/*.sample +plugins/*.sample diff -Nru postfwd-1.20/debian/postfwd.init postfwd-1.32/debian/postfwd.init --- postfwd-1.20/debian/postfwd.init 2012-01-04 15:36:46.000000000 +0000 +++ postfwd-1.32/debian/postfwd.init 2012-01-04 15:36:47.000000000 +0000 @@ -86,9 +86,9 @@ ;; restart|force-reload) echo -n "Restarting $DESC (incl. cache): " - $0 stop + $0 stop > /dev/null sleep 1 - $0 start + $0 start > /dev/null echo "$NAME." ;; *) diff -Nru postfwd-1.20/debian/postfwd.manpages postfwd-1.32/debian/postfwd.manpages --- postfwd-1.20/debian/postfwd.manpages 1970-01-01 00:00:00.000000000 +0000 +++ postfwd-1.32/debian/postfwd.manpages 2012-01-04 15:36:47.000000000 +0000 @@ -0,0 +1,2 @@ +debian/tmp/postfwd1.8 +man/man8/postfwd2.8 diff -Nru postfwd-1.20/debian/postfwd.README.Debian postfwd-1.32/debian/postfwd.README.Debian --- postfwd-1.20/debian/postfwd.README.Debian 1970-01-01 00:00:00.000000000 +0000 +++ postfwd-1.32/debian/postfwd.README.Debian 2012-01-04 15:36:47.000000000 +0000 @@ -0,0 +1,67 @@ +postfwd for Debian +------------------ + +1. PROVIDE A CONFIGFILE +----------------------- + +Please provide a config file, usually /etc/postfix/postfwd.cf. Examples are +located in /usr/share/doc/postfwd/examples/. +Another can be found at http://hege.li/howto/spam/etc/postfwd/postfwd.conf +and is provided as example-cfg2.txt. + +A quickstart guide is available at http://www.postfwd.org/quick.html and the +online documentation at http://www.postfwd.org/doc.html, the offline version +can be viewed with 'postfix -m'. + +2. VERIFY CONFIG +---------------- + +How interpret the parser your rules, you can check with: + +# postfwd -f /etc/postfix/postfwd.cf -C -v + +Check your rules against sample request: + +# cat request.sample | postfwd -f /etc/postfix/postfwd.cf -L + +# cat request.sample + +------ snip ------- +ccert_fingerprint= +size=64063 +helo_name=english-breakfast.cloud9.net +reverse_client_name=english-breakfast.cloud9.net +queue_id= +encryption_cipher= +encryption_protocol= +etrn_domain= +ccert_subject= +request=smtpd_access_policy +protocol_state=RCPT +recipient=someone@domain.local +instance=6748.46adf3f8.62156.0 +protocol_name=ESMTP +encryption_keysize=0 +recipient_count=0 +ccert_issuer= +sender=owner-postfix-users@postfix.org +client_name=english-breakfast.cloud9.net +client_address=168.100.1.7 +------ snip ------- + +Samples can be taken into the logfile when starting the daemon with "-vv" + +3. AUTOMATIC STARTUP +-------------------- + +In order to avoid the startup of the daemon on an unconfigured machine, +automatic startup, on boot, is disabled by default. To enable it just edit the +file /etc/default/postfwd and set the "startup" variable to 1. + +4. CHOOSING WHICH POSTFWD VERSION TO USE +---------------------------------------- + +Since some time, there is also a prefork version available, called postfwd2. +You can use update-alternatives to choose between 'postfwd1' and 'postfwd2'. + + -- Jan Wagner Mon, 10 Mar 2008 22:37:44 +0100 diff -Nru postfwd-1.20/debian/README.Debian postfwd-1.32/debian/README.Debian --- postfwd-1.20/debian/README.Debian 2012-01-04 15:36:46.000000000 +0000 +++ postfwd-1.32/debian/README.Debian 1970-01-01 00:00:00.000000000 +0000 @@ -1,67 +0,0 @@ -postfwd for Debian ------------------- - -1. PROVIDE A CONFIGFILE ------------------------ - -Please provide a config file, usually /etc/postfix/postfwd.cf. Examples are -located in /usr/share/doc/postfwd/examples/. -Another can be found at http://hege.li/howto/spam/etc/postfwd/postfwd.conf -and is provided as example-cfg2.txt. - -A quickstart guide is available at http://www.postfwd.org/quick.html and the -online documentation at http://www.postfwd.org/doc.html, the offline version -can be viewed with 'postfix -m'. - -2. VERIFY CONFIG ----------------- - -How interpret the parser your rules, you can check with: - -# postfwd -f /etc/postfix/postfwd.cf -C -v - -Check your rules against sample request: - -# cat request.sample | postfwd -f /etc/postfix/postfwd.cf -L - -# cat request.sample - ------- snip ------- -ccert_fingerprint= -size=64063 -helo_name=english-breakfast.cloud9.net -reverse_client_name=english-breakfast.cloud9.net -queue_id= -encryption_cipher= -encryption_protocol= -etrn_domain= -ccert_subject= -request=smtpd_access_policy -protocol_state=RCPT -recipient=someone@domain.local -instance=6748.46adf3f8.62156.0 -protocol_name=ESMTP -encryption_keysize=0 -recipient_count=0 -ccert_issuer= -sender=owner-postfix-users@postfix.org -client_name=english-breakfast.cloud9.net -client_address=168.100.1.7 ------- snip ------- - -Samples can be taken into the logfile when starting the daemon with "-vv" - -3. AUTOMATIC STARTUP --------------------- - -In order to avoid the startup of the daemon on an unconfigured machine, -automatic startup, on boot, is disabled by default. To enable it just edit the -file /etc/default/postfwd and set the "startup" variable to 1. - -4. CHOOSING WHICH POSTFWD VERSION TO USE ----------------------------------------- - -Since some time, there is also a prefork version available, called postfwd2. -You can use update-alternatives to choose between 'postfwd1' and 'postfwd2'. - - -- Jan Wagner Mon, 10 Mar 2008 22:37:44 +0100 diff -Nru postfwd-1.20/debian/rules postfwd-1.32/debian/rules --- postfwd-1.20/debian/rules 2012-01-04 15:36:46.000000000 +0000 +++ postfwd-1.32/debian/rules 2012-01-04 15:36:47.000000000 +0000 @@ -21,20 +21,22 @@ # install binaries install -D -m 644 sbin/postfwd debian/postfwd/usr/sbin/postfwd1 install -D -m 644 sbin/postfwd2 debian/postfwd/usr/sbin/postfwd2 + install -D -m 644 tools/hapolicy/hapolicy debian/hapolicy/usr/sbin/hapolicy # install man page mkdir -p debian/tmp/ cp man/man8/postfwd.8 debian/tmp/postfwd1.8 + pod2man debian/hapolicy/usr/sbin/hapolicy man/man8/hapolicy.1 # Build architecture-independent files here. binary-indep: build install dh_testdir dh_testroot - dh_installchangelogs doc/CHANGELOG - dh_installdocs tools + dh_installchangelogs doc/postfwd.CHANGELOG + dh_installdocs -ppostfwd -Xhapolicy + dh_installdocs -phapolicy tools/hapolicy/hapolicy[0-9a-zA-Z.]* dh_installexamples etc/postfwd.cf.sample debian/example-cfg* dh_installinit -- defaults 19 21 - dh_installman man/man8/postfwd2.8 - dh_installman debian/tmp/postfwd1.8 + dh_installman dh_compress dh_fixperms dh_perl diff -Nru postfwd-1.20/doc/arch.html postfwd-1.32/doc/arch.html --- postfwd-1.20/doc/arch.html 1970-01-01 00:00:00.000000000 +0000 +++ postfwd-1.32/doc/arch.html 2011-08-15 16:17:36.000000000 +0000 @@ -0,0 +1,27 @@ + + + +postfwd - basic architecture + + + + + + + + +

postfwd workflow


+ +

+

+

+ +
http://www.postfwd.org/ + 2007 - 2009 by Jan Peter Kessler + info (AT) postfwd (DOT) org +
+
+

+ + + diff -Nru postfwd-1.20/doc/CHANGELOG postfwd-1.32/doc/CHANGELOG --- postfwd-1.20/doc/CHANGELOG 2010-11-14 22:01:17.000000000 +0000 +++ postfwd-1.32/doc/CHANGELOG 1970-01-01 00:00:00.000000000 +0000 @@ -1,316 +0,0 @@ -1.20 -===== -- code: changed the default umask for the server socket to 0111 - to support out-of-the-box postfix setup. Use the - --umask setting to change this -- bugfix: rbl check could fail on multiple dnsbl answers -- bugfix: rbl checks disabled for ipv6 addresses, cidr compare - will switch to default (regex/string) - -1.19 -===== -- code: Rate limit code rewritten -- code: new --umask setting allows to set filepermissions for pidfiles - and unix domain sockets. Default is 0117 (owner and group rw). - -1.18 -===== -- bugfix: Fixed bug when comparing sender and recipient addresses, like - "sender=$$recipient". This affects only postfwd version 1.17. - -1.17 -===== -- bugfix: Invalid characters in variable substitutions were not correctly catched when - the '=' operator was used, like "client_name=$$helo_name". If you can not - upgrade for some reason change your rule to "client_name=~$$helo_name" -- code: Net::DNS errors will now be handled gracefully -- code: default for options --dns_max_ns_a_lookups and --dns_max_mx_a_lookups of 100 - -1.16 -===== -- bugfix: this is a bugfix release for 1.15. anyone affected is encouraged to upgrade. - detail: the default behavior for the '=' operator with numeric items - (size, recipient_count, ...) changed with version 1.15 to '==' (equals to). - now these items are compared '>=' (greater than) again. - note: if you are using 1.15 and you are not able upgrade for some reason, - please change '=' to '>=' in your ruleset where you mean 'greater than'. - -1.15 -===== -- feature: items may now be retrieved from files using "item=file:/some/where" - more information in the postfwd manual (FILES section) -- feature: helo_address, and sender_(ns|mx)_addrs can now be csv items -- feature: new rcpt() command counts recipients for rate limits (thanks to Sahil Tandon) -- code: redirect syslog to stdout for --kill, --reload and --showconfig -- code: option --reload (HUP signal) now reloads config, if the file is unchanged -- code: configuration parser improvements: - * rules without defined action will be skipped at configuration stage - * undefined ACLs will now be detected and skipped at configuration stage - * parser timeout skips loading a rule after 4s, to prevent problems with - large files or loops. use --config_timeout to override -- bugfix: documentation fixed (missing "action=" in ask() examples) - -1.14 -===== -- feature: new compare operators * - ==================================================================== - ITEM == VALUE true if ITEM equals VALUE - ITEM => VALUE true if ITEM >= VALUE - ITEM =< VALUE true if ITEM <= VALUE - ITEM =~ VALUE true if ITEM ~= /^VALUE$/i - *ITEM != VALUE false if ITEM equals VALUE - *ITEM !> VALUE false if ITEM >= VALUE - *ITEM !< VALUE false if ITEM <= VALUE - *ITEM !~ VALUE false if ITEM ~= /^VALUE$/i - ITEM = VALUE default behaviour (see ITEMS section) - ==================================================================== -- feature: added --nodaemon option -- code: non dns items first: if a rule contains dns and non dns items, the - lookups will only be done if all non dns items matched -- bugfix: empty pcre with empty sender_(ns|mx)_names was parsed incorrectly. - this bug affects postfwd versions 1.12 - 1.13 -- bugfix: negated pcre items with '~=' operator were parsed incorrectly. - this bug affects postfwd version 1.13 - -1.13 -===== -- feature: enabled dns cache for sender(ns|mx) and helo address -- feature: new options --dns_max_ns_lookups and --dns_max_mx_lookups -- bugfix: workaround: Net::Server died if a unix domain socket - filename without a dot ('.') was used (B. Frauendienst) - -1.12 -===== -- feature: new items sender_ns_names and sender_ns_addrs -- feature: new items sender_mx_names and sender_mx_addrs -- feature: new item helo_address, please see docs for more -- feature: added --proto switch, to enable the use of unix domain sockets - (thanks to Bernhard Frauendienst) -- feature: added command-line options --kill and --reload - (of course you can still use TERM and HUP signals) -- feature: dnsbl txt lookups only for dnsbls with at least one a record. - use --dns_async_txt for the old behaviour (see docs for more). -- code: small performance improvement (5-10%) for pcre (~= or =~) items -- bugfix: network 0.0.0.0/0 did not work as expected on all platforms -- bugfix: postfwd tried to chop() an uninitialized value when sending - garbage (non policy delegation protocol requests) to it. - -1.11 -===== -- feature: the ask() action allows to delegate the policy decision to another - policy service (like postgrey). a new parameter allows to specify - answer patterns which should be ignored by postfwd. please look - at the 'ACTIONS' section in the manual (postfwd2 -m) for details. -- feature: new options --noidlestats and --norulelog -- feature: more informative --version -- feature: documentation updates - - -************************************************************************************************** -ATTENTION: requirements changed - postfwd since v1.10pre8 now uses Net::DNS. - Net::DNS::Async and Net::CIDR::Lite are not required anymore. -NOTE: please see the docs ('postfwd -m' or 'perldoc postfwd') for more information -************************************************************************************************** - -1.10pre8b -========== -- bugfix: fixed two warnings about logging of undefined values in verbose mode - -1.10pre8a -========== -- bugfix: item plugins have been made available as cache-id items. this fixes a minor issue with - --cache-rdomain-only and version 1.10pre8 - -1.10pre8 -========= -- code: Net::DNS::Async is no longer used. The parameters --dns_queuesize and - --dns_retries are still valid but have no function. The option --dns_timeout - now defaults to 14s and applies to all rules containing dns items. -- code: Net::CIDR::Lite is not required any longer. -- feature: the new variable $$request_hits contains a list of all matching ruleids -- feature: the new variable $$dnsbltext allows access to txt records of rbls -- feature: new options --no-rulestats and --nodnslog -- feature: ttls of the dns responses override --cache-rbl-timeout when bigger, which means - that you can set the option to 0 if you want to use the ttl of the dns answer. -- feature: new item "rhsbl_helo" allows to check helo against rhsbls -- bugfix: disabled fallback to synchronous dns on timed out rbls, default is now - to disable non responding dnsbls after 11 timeouts for 1200 seconds. - use --dns_timeout_max and --dns_timeout_interval to adjust these settings. -- bugfix: days=Wed now means exactly Wednesday. to use a range you may - still specify days=Wed- days=-Wed and days=Tue-Thu - this applies to all date and time items -- code: --shortlog is now default behaviour (use -v to see more) -- code: changed Net::Server behaviour to ignore syslog errors - - -1.10pre7c -========== -- note: 1.10pre7c does not contain any code-changes to the postfwd daemon. - this release only fixes some issues when buidling packages. -- bugfix: set permissions of manpage dirs to 755 -- bugfix: manpage has gone to section 8 -- bugfix: postfwd-rblcheck.pl has gone to the tools folder -- bugfix: documentation now refers to request.sample - -1.10pre7b -========== -- bugfix: inter-section links in documentation did not work correctly - (thanks to Alexander 'Leo' Bergolth) - -1.10pre7a -========== -- bugfix: implemented workaround for possible crash of Sys::Syslog when syslog - daemon is unavailable (thanks to Henrik Krohns) -- bugfix: changed syslog socktype on solaris - -1.10pre7 -========= -- feature: $$request_score may now be used to access a request's score -- feature: auto-deactivation of non-responding dnsbls; please see the - new --cleanup-timeouts and --dns_timeout_max options -- feature: the set command allows some basic operations: - ========================================================= - action=set(ITEM+=VALUE) adds VALUE to ITEM - action=set(ITEM-=VALUE) substracts VALUE from ITEM - action=set(ITEM*=VALUE) multiplies ITEM by VALUE - action=set(ITEM/=VALUE) divides ITEM through VALUE - action=set(ITEM.=VALUE) concatenates ITEM and VALUE - action=set(ITEM==VALUE) sets ITEM to VALUE - action=set(ITEM=VALUE) default: sets ITEM to VALUE - ========================================================= -- bugfix: fixed wrong timestamp for timed out rbls -- code: score() command now allows integer values -- code: setting an empty score removes it from the table -- code: duplicate lookups within the same rule are now recognised - -1.10pre6 -========= -- feature: the new rate() and size() commands offer some basic rate limit controls -- feature: new cleanup options: --cleanup-rates -- feature: regexps may now be included in // characters -- feature: an empty sender address is now replaced by <> -- bugfix: some csv-separated itemlists did not work correctly since v1.10pre1 -- bugfix: fixed a possible race condition with request cache when config was reloaded via HUP signal - -1.10pre5a -========= -- bugfix: fixed a possible race condition in rbl_read_dns() function - -1.10pre5 -======== -- feature: new dnsbl lookup types: rhsbl_client, rhsbl_sender, rhsbl_reverse_client -- feature: new caching option --cacheid allows to increase performance and cache efficiency -- code: cleanups will only be logged if '-v' was set or if the process took at least 1 second - -1.10pre4 -======== -- feature: new date items 'days=Sun-Sat' and 'months=Jan-Dec' -- feature: all date/time items may now be csv-separated lists -- feature: the set command can now have multiple, csv-separated arguments -- feature: enhanced use of rblcount and rhsblcount (see doc) -- feature: new caching options --cache-no-sender,--cache-rbl-timeout and --cache-rbl-default -- feature: new cleanup options: --cleanup-requests and --cleanup-rbls -- code: cache cleanups are now performed on interval basis (not per request) - which should decrease load on busy systems. -- code: warning on multiple definitions of id, action, rblcount and rhsblcount is issued -- bugfix: date items may now contain whitespaces (e.g. days = Fri - Sat) - -1.10pre3 -======== -- feature: all hits for a rule are now logged in the final message -- feature: option --shortlog disables logging for some postfwd actions -- feature: introduced set() command, which enables setting of variables, which then can be - compared to the ruleset to gain performance on repeated item lists (see doc). -- feature: introduced new command-line switches --dns_queuesize, --dns_retries and dns_retries - to influence the behaviour of DNS lookups -- code: restructured code (~+15% speed compared to v1.03, with nodns ruleset) - -1.10pre2 -======== -- feature: DNS lookups are now parallelized per rule. this increases the performance of dnsbl - items (and any other future dns based check) significantly. implementation (per rule): - 1.) send dns queries, 2.) process other non-dns items, 3.) evaluate dns results - As a downside of this approach the parser does not wait for dns queries anymore, which - could result in increased load. you might use the sleep() command to get some delay ;-) - -1.10pre1 -======== -- feature: the way how request items are compared to the ruleset can now be influenced. - =============================================================== - ITEM==VALUE true if ITEM equals VALUE - ITEM>=VALUE true if ITEM >= VALUE - ITEM<=VALUE true if ITEM <= VALUE - ITEM~=VALUE true if ITEM ~= /^VALUE$/i - ITEM=VALUE old default behaviour - =============================================================== -- feature: the score() command now allows some basic arithmetic operations (+-*/=) - e.g. action=score(*2) will double the current score -- feature: you can now refer to request attributes in actions, which will e.g. allow the following: - id=R001; rbl=zen.spamhaus.org; \ - action=554 5.7.1 see http://www.spamhaus.org/query/bl?ip=$$client_address -- feature: introduced extra request attributes sender_localpart, sender_domain, - recipient_localpart, recipient_domain and version for use like: - id=test01; client_name ~= $$(sender_domain)$; action=score(-0.5) -- bugfix: the "=" character could not be used in items -- bugfix: negation of items (!!) did not work correctly under some circumstances -- bugfix: time was logged incorrectly during request cache cleanups in verbose mode - (thanks to Henrik Krohns) -- code: restructured some parts of the code for future enhancement options. a plugin interface - was prepared and will be included in the final version. perl's -w switch is used now. -- note: the documentation has not been fully updated yet. - -1.03 -==== -- feature: request attributes can now be compared (e.g. to compare client_name and helo_name) -- feature: rule items can now be negated (e.g. to compare if client_name does not match helo_name) -- feature: extra verbose mode '-vv' now displays much more debug information -- feature: -L switch to redirect log output to stdout -- feature: new manual section about the parser, other updates -- bugfix: caching did not work at end_of_data level because of different queue ids, corrected -- bugfix: all numeric items will now match if the request attribute exceeds the corresponding - rule item. the negation operator will lead to the opposite effect: - ============================================================================= - ITEM=VALUE TYPE - ============================================================================= - rblcount=2 matches if rbl hits >= 2 - recipient_count=10 matches if recipients >= 10 - size=12345 matches if size >= 12345 - encryption_keysize=256 matches if keysize >= 256 - encryption_keysize=!!256 matches if keysize < 256 - ============================================================================= - -1.02 -==== -- bugfix: rblcount and rhsblcount did not work correctly since V1.01, corrected - -1.01 -==== -- feature: multiple rbl, rhsbl and client_address statements in a single rule are now possible -- feature: note() command will now log (not warn!). an empty argument suppresses logging -- feature: in verbose mode you must set -vv now to see the whole request attributes -- feature: cached dnsbl results are now only logged in verbose mode -- manual: several minor updates - -1.00 -==== -- feature: multiple definitions of the same item in a single rule to build groups -- feature: rules can span multiple lines by specifying a trailing "\" character -- feature: syslog_name can now be set with -l|--logname