Vernon Schryver
vjs@calcite.rhyolite.com
Sun Mar 21 13:59:56 UTC 2010
Version 1.3.XX of the DCC source is in
http://www.dcc-servers.net/dcc/source/dcc.tar.Z and
http://www.rhyolite.com/dcc/source/dcc.tar.Z
Commercial version 2.3.XX of the DCC Reputation code is in the usual place.
The CHANGES file in
http://www.dcc-servers.net/dcc/dcc-tree/CHANGES and
http://www.rhyolite.com/dcc/dcc-tree/CHANGES and
starts with
Fix `hackmc -T` to work with sendmail.mc FEATURE(`delay_checks')
Add `hackmc -U` to whitelist authenticated SMTP clients like -T but
unlike -T not whitelist SMTP clients with verified STARTTLS
certificates. Too many sources of spam have good TLS certs.
Fix `hackmc -M` to change sendmail.cf to terat Feature(badmx) and
Feature(block_bad_helo) like Feature(dnsbl) and Feature(enhdnslb)
and report bad mail to DCC before rejecting it.
Dccm with `hackmc -R` should reject mail for unauthorized relaying despite
whitelisting in whiteclnt files and "option MTA-first".
Add <META HTTP-EQUIV="x-dns-prefetch-control" CONTENT="off"> to
the proof-of-concept whitelist CGI scripts.
Add ./configure --with-make-cmd=x to ease the use of bmake
/var/dcc/libexec/dcc-nagios notices forced-passive and auto-NAT signs
of DCC flooding problems.
Turn off RES_DEFNAMES and RES_DNSRCH for name DNS blacklists to stop
extra queries reported by Bart Dumon.
Fix inversion of dccd -f/-F in 1.3.120 reported by Tomasz Potega.
/var/dcc/libexec/updatedcc should automagically fetch, build, and
install the commercial or free version, depending on the .updatedcc_pfile
file, unless you have installed a version of Linux with the broken
default `sort` collating sequence since last upgrading. If so, an
easy way to get the old updatedcc script working is to delete the
entire /var/dcc/build/dcc directory before running updatedcc.
Vernon Schryver vjs@rhyolite.com
More information about the DCC
mailing list