- Mar 19, 2004
- Feb 22, 2004
-
-
rswindell authored
the directory).
-
- Dec 13, 2003
-
-
rswindell authored
from a blacklisted server. Probably want to make rate adjustable later.
-
- Dec 07, 2003
- Dec 06, 2003
-
-
rswindell authored
used to trace message origins for security reasons.
-
- Dec 04, 2003
-
-
rswindell authored
smb_read() will now retry the read operation if the read fails with an errno of DEADLOCK (occurs on Unix if a Win32 system has the bytes already locked).
-
- Nov 26, 2003
-
-
rswindell authored
including comment header fields.
-
rswindell authored
Created smb_getmsgtxtlen() to calculate total message body text length, including comment header fields.
-
rswindell authored
in JSexec-win32.
-
rswindell authored
than the mail sender's e-mail address.
-
rswindell authored
"being sent" via SMTP, keeping multiple sendmail instances from trying to send the same message simultaneously.
-
- Nov 25, 2003
-
-
rswindell authored
message detected).
-
- Oct 21, 2003
-
-
rswindell authored
Added support for JavaScript mail processors configured in mailproc.cfg with "?scriptname". See ctrl/mailproc.cfg and exec/mailproc_example.js for details. Some cosemtic changes to log entries. Bugfix: if a mail processor rejected a message, the server could segfault if the sending server reset the session or attempted another message. Also, temp files (recipient list and msg text) would be orphaned in the data_dir.
-
- Oct 20, 2003
- Oct 16, 2003
- Oct 11, 2003
-
-
rswindell authored
function prototypes (currently using LOG_INFO level for all).
-
- Oct 09, 2003
-
-
rswindell authored
recycling without using semaphore files.
-
- Oct 03, 2003
-
-
rswindell authored
-
- Sep 26, 2003
-
-
rswindell authored
back to callback functions (e.g. lputs, thread_up, etc). This allows servers to share the same callback functions, eliminating many nearly-identical functions. This was able to shave quite a bit of redundant code from ntsvcs.c. This feature is not utilized in sbbs (sbbscon.c) or sbbsctrl (mainformunit.cpp).
-
- Sep 25, 2003
-
-
rswindell authored
smb_hfield_append_str() used for creating and appending ASCIIZ header fields. These functions handle the string-length calculation automatically.
-
- Sep 17, 2003
-
-
rswindell authored
Adding destination nettype and address for QWK-routed SMTP mail. Added support for mail processing command-line specifers: %h, %i, and %u (see ctrl/mailproc.cfg for details). Fixed %v (version specifier).
-
- Sep 16, 2003
-
-
rswindell authored
Added support for routing to QWKnet uplink (e.g. vert!digital.man@youraddr.com)
-
- Sep 09, 2003
- Sep 05, 2003
-
-
rswindell authored
Fixed bug in dns_blacklisted() - can't use SAFECOPY on char*. Resets DNSBL-lookup result between messages if IP was found in received hdr. Beginning to implement QWKnet routing upstream (through QWKnet hub).
-
deuce authored
DNSBL_CHECK_ALL
-
rswindell authored
messages for received SMTP mail (for all users).
-
- Sep 04, 2003
- Sep 02, 2003
-
-
deuce authored
to track down the issue, I finally gave up... as a result, there is a new feature! Linux will no longer completely drop it's root privs (It never really did anyways, and you couldn't possibly make it... but now it does so even less) As a result, Linux can now recycle all servers when running as non-root. From a security standpoint, doing this is more secure than running as root, but less secure than the behaviour on POSIX.4 compliant pthreads. Running the BBS as root means that if a user can create a file with the name of his choice, or pass *any* command through to a shell, that user will get root access to the machine. Using the new behaviour, the user would need to trick the Synchronet binary itself into executing arbitrary and specially crafted code... probobly using the dreaded buffer overflow... of which there are probobly some in the web server code. :-) If the user can do this much more tricky feat, then the user gets root privs. If not, the user will have to find something else to exploit on your system. Knowing that some *BSD users (surely not OpenBSD users though) will want to trade security for convenience, I stole a page out of the Sendmail book and implemented a "DONT_BLAME_SYNCHRONET" make option. Compiling like this: gmake DONT_BLAME_SYNCHRONET=1 Will implement this same behaviour on non-Linux platforms. Allowing this partial security feature.
-
- Aug 30, 2003
- Aug 20, 2003
-
-
rswindell authored
-