MailScanner is a complete e-mail security system designed for use on
e-mail gateways. It protects against viruses, and detects attacks against
e-mail client packages (such as Outlook, Outlook Express, Eudora). It can
also detect almost all unsolicited commercial e-mail (spam) passing through
it and respond to all incidents in a wide variety of ways.
Not only can it scan for known viruses, but it can also protect against unknown
viruses hidden inside e-mail attachments by refusing entry to attachments whose
filenames match any given pattern. This can include generic patterns that trap
filenames attempting to hide the true filename extension (e.g. ".txt.vbs").
It is superior to many commercial packages in its ability to handle attacks
against itself, such as Denial Of Service attacks caused by messages containing
the "Zip of Death". It is easy to install into an existing e-mail gateway,
requiring very little knowledge of sendmail and no change to an existing
sendmail configuration.
MailScanner itself is entirely open source, but it uses widely known commercial
virus scanning packages at its core. The other software it uses is all high
quality open source software, leading to a system that can be trusted for
performance and reliability.
===> The following configuration options are available for MailScanner-5.3.4.3_2:
CLAMAV=on: Install ClamAV
DOCS=on: Build and/or install documentation
SPAMASSASSIN=on: Install SpamAssassin
===> Use 'make config' to modify these settings
Reason:
The clamavmodule has finally been removed after a long deprecation
period. Please remove all references to it in your mailscanner.conf as
it will now count as a syntax error and may stop MailScanner starting!
Number of commits found: 147 (showing only 100 on this page) #
mail/mailscanner: Remove archivers/lha dependency
From inspecting the code it uses 7z to unarchive lha files anyway
This means that packages will once again be built for MailScanner
PR: ports/269732
Reported by: Dennis Clarke
security/clamav: Update to 1.0.0
* Switch to use bundled TomsFastMath library. Upstream made
incompatible change to bundled copy and this makes it impossible to
use external one. They also dropped option to use it.
* Bump PORTREVISION of consumers as shlib version is changed.
* Note that though this is new LTS feature release security/clamav-lts
stays in 0.103.x until either next regular feature release (probably
1.1.0) is released or 0.103.x reaches its EoL.
ReleaseNotes: https://blog.clamav.net/2022/11/clamav-100-lts-released.html
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
mail: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ashish@FreeBSD.org>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam David <adam@FreeBSD.org>
* Adam McDougall <mcdouga9@egr.msu.edu>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Alex Deiter <tiamat@komi.mts.ru>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
* Alex Perel <veers@disturbed.net>
(Only the first 15 lines of the commit message are shown above )
*/*: Remove redundant '-[0-9]*' from CONFLICTS
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter
for the bash package in any version. But that pattern is functionally
identical with just "bash".
Approved by: portmgr (blanket)
Fix spamassassin symlink.
At some point in the distant past there was a config file called
spam.assassin.prefs.conf. This was renamed to spamassassin.conf,
but the symlink in %D/etc/mail/spamassassin still pointed to the
old location. This worked fine for old installs, but new installs
were left out. This should DTRT for both without administrator
intervention necessary.
Update to 5.1.2-1
- Patch Mail::ClamAV to allow install for SuSE builds
- 7zip handle spaces in filenames
- Clamd full message scan
- Detect fax and tel links
- mime_perl_to_string fix for ignored handler
- Add Kaspersky Linux Mail Server support
- Ignore "archive damaged" in esets scanner output
- Cleanup reports, add en_uk reports
- Workaround MIME::Parser failing to decode UTF-8
- Refactor milter to fully support multiple original recipients
- Refactor milter to support large messages
- Refactor milter to reject blacklisted emails early
- Fix off by one header add in milter
- Look for all recipient records in DeleteRecipients
- Update milter doc to 1.3
- Remove invalid Apparmor code in debian package
- Fix condition concatenation in ms-update-phishing
- Fix mktemp in clamav-wrapper for FreeBSD11
- Add DrWeb virus scanner support
- Fixes for clamav on rhel variants
Update to 5.1.1
Fix config file upgrade, and disconnect the .sample processing; done by
ports tree now.
Reset maintainer, as he has not responded to email for as long as I can
remember. I have been (and still am) very grateful for his help in the past.
Approved by: maintainer timeout (>1 year)
Partially revert the previous update.
No longer clobber user's configuration.
Fixup most pathnames, works for me now (tm)
PR: ports/217142
PR: ports/219938
PR: ports/219990
- Update to 5.0.3
- Add many recommended Perl modules to dependencies
- Remove DOCS option (there are no docs now)
- Since there are no Sophos binaries, remove the Sophos.install.freebsd file
- Simplify do-install - use COPYTREE_SHARE, COPYTREE_BIN
PR: 217142
Submitted by: pkubaj@anongoth.pl
Approved by: maintainer(timeout, > 100 days)
mail/mailscanner: Remove redundant dependency on unzip
A dependency on unzip will never be registered since unzip is available
on all supported platforms (since FreeBSD 8.0).
Approved by: infrastructure improvements blanket (sweep for unzip)
Convert all :U to :tu and :L to :tl
Since FreeBSD 8.4 and FreeBSD 9.1 make(1) do support :tu and :tl as a
replacement for :U and :L (which has been marked as deprecated)
bmake which is the default on FreeBSD 10+ only support by default
:tu/:tl a hack has been added at the time to support :U and :L to ease
migration. This hack is now not necessary anymore
Note that this makes the ports tree incompatible with make(1) from
FreeBSD 8.3 or earlier
With hat: portmgr
Move {mail,japanese}/p5-Mail-SpamAssassin to &/spamassassin, in the name of
improving accessibility.
I think people who want to just find the port/package and install it are
more likely to look for "spamassassin the program" than "spamassassin the
perl module collection."
Update to 4.84.6
Fix temporary file bugs
Pointed out by: brad@comstyle.com
PR: ports/187005
Submitted by: Kevin Kobb (maintainer)
Style and shebang fixes and stage.
- Fix MS TNEF unpacking
- Use substitution in MailScanner.8 to update version
- Correct handling of WITHOUT_SPAMASSASSIN_SYMLINK in pkg-install
PR: ports/166254
Submitted by: Kevin Kobb (kkobb@skylinecorp.com) (maintainer)
Feature safe: yes
Kevin Kobb has been much quicker than me at keeping MailScanner up to date,
so punish him with maintainership
Approved by: Kevin Kobb <kkobb@skylinecorp.com> (new maintainer)
Feature safe: yes
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
- Pass maintainership to submitter
- s/LOCALBASE/PREFIX/ where necessary
- Remove obsolete %%RC_SUBR%% reference
- Assign to RUN_DEPENDS with immediate expansion
- Use REINPLACE_CMD instead of PERL macro
PR: ports/156883
Submitted by: Chris Rees <utisoft@gmail.com>
Change dependency on old p5-Compress-Zlib, p5-IO-Compress-Base,
p5-IO-Compress-Zlib and p5-IO-Compress-Bzip2 modules to p5-IO-Compress.
Explicitly depend on p5-IO-Compress only if PERL_LEVEL < 500903
Bump PORTREVISION
This is a workaround to the continuous taint mode incompatibilities with this
code.
- This patch introduces a new rc variable called "mailscanner_user". If you
changed the "Run As User"
variable in MailScanner.conf (which triggers taint mode) you MUST now also set
the same value in /etc/rc.conf.
- Removed ulimit bump from startup script, since its now dynamically set at boot
time based on system resources.
- fixes permission problems with pid file.
PR: ports/142382
Submitted by: Mike Jakubik <mike.jakubik@intertainservices.com>
Fix a few "bad example" problems in the rc.d scripts that have been
propogated by copy and paste.
1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).
No PORTREVISION bumps because all of these changes are noops.
- Update security/clamav to 0.94 [1] and fix a remote DoS [2]
- Chase libclamav version bump on all dependant ports
- Bump necessary PORTREVISIONS
- Fix some BROKEN messages from ports that were already broken with clamav-0.93
- Mark security/klamav as BROKEN since it doesn't build with clamav-0.94
PR: ports/127122 [1], ports/127310 [2]
Submitted by: Gary Palmer <freebsd-gnats@in-addr.com> [1], delphij [2]
Approved by: portmgr (pav)
Bump portrevision due to upgrade of devel/gettext.
The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).
PR: ports/124340
Submitted by: edwin@
Approved by: portmgr (pav)
Welcome bsd.perl.mk. Add support for constructs such as USE_PERL5=5.8.0+.
Drop support for antique perl.
Work done by: gabor
Sponsored by: Google Summer of Code 2007
Hat: portmgr
- Fixed error in auto-zip: If a message contained 2 different attachments
with exactly the same filename, the auto-zip feature would fail and
MailScanner would die.
Submitted by: Jan-Peter Koopmann via irc (maintainer)
- Update clamav to 0.90.1
- Use -lthr to build clamav since it has problems with libpthread
- Bump PORTREVISION of dependant ports, libclamav version was bumped
- Fix clamcour to build with clamav-0.90.x using patch sent by maintainer
Fix dependency: use sysutils/p5-Filesys-Df instead of
devel/p5-Filesys-Statvfs_Df, which the former replaces. Bump
portrevision.
This should fix INDEX build.
Noticed by: droso, index build script
Pointy hat to: aaron, tobez (implicit)
- Update to 4.53.8
Just after 4.53.7 was committed someone spotted a serious bug in that version
which was quickly fixed by the author.
PR: ports/96830
Submitted by: maintainer
- Update to 4.53.7
3/5/2006 New in Version 4.53.7-1
================================
* New Features and Improvements *
- Attachment extraction now checks for available disk space and a DoS attack
using messages with high expansion ratios will fail even quicker than it
did before.
- Added new setting "SpamAssassin Local State Dir" to support the sa-update
tool provided with MailScanner these days, to provide a way of auto-
updating the core SpamAssassin rulesets. The default value is set to what
you need for Linux (/var/lib).
- Added new cron job to run sa-update every night. The location of the
sa-update program is read from /etc/sysconfig/MailScanner.
- Added support for new header -H file format in Exim 4.61.
(Only the first 15 lines of the commit message are shown above )
- Fix bug in mta.sh
- Fix rc.subr reference in update_phishing_sites.cron and
update_virus_scanners.cron
- Patch for changed queue file format of Exim 4.61
- Mark IGNORE for PERL_LEVEL < 500600 which is required by databases/p5-DBI
(dependency)
PR: 96351
Submitted by: Jan-Peter Koopmann <j.koopmann@seceidos.de> (maintainer)
Number of commits found: 147 (showing only 100 on this page)
