Release Notes: A true SNMP agent and an MIB now allow monitoring amavisd process health and collecting mail traffic statistics by SNMP clients such as MRTG or Cacti. A SMTP-status response text for blocked mail is now customizable. DKIM signatures now protect important mail header fields from duplication. Parsing of a combined result from DSPAM has been fixed. A startup failure has been fixed when spam scanning has been disabled. Propagation has been corrected for an "Exceeded storage quota" exception from several decoders. A bug has been fixed in a milter setup, where a "1" was inserted in a header field instead of a correct string.
Release Notes: Loading of a policy bank based on a client's IP address is now implemented. Spam checking of long messages is now possible by passing a truncated message to a scanner. DKIM and DK signatures are passed intact to SpamAssassin 3.3 even when a message is truncated. Support for spam scanners other than Mail::SpamAssassin is now available by using a @spam_scanners list. CRM114 is now supported, either as a SpamAssassin plugin, or by directly calling it instead of or in addition to SpamAssassin. External spawned programs can now be used as spam scanners, currently supported are CRM114 and DSPAM.
Release Notes: Detection of nonstandard bounces was improved, allowing this release to kill more third-party backscatter without sacrificing reliable acceptance of genuine DSN and MDN. The backscatter processing rate was greatly improved by avoiding SA processing of killed bounces. A DKIM documentation section was rewritten to prompt more wide-spread use of DKIM signing by amavisd. A bug was fixed that could let the SMTP protocol get out-of-step when SMTP connection cache is enabled. Compatibility with SpamAssassin 3.3 (CVS head) was regained, and compatibility with Perl 5.10.0 was tested and confirmed.
Release Notes: Default SQL clauses now join tables using both the partition_tag and the mail_id fields, meeting needs for MySQL database partitioning. A data type mismatch between SQL tables was fixed in README.sql-mysql. Bounce-killer's false positives are now avoided in multipart/mixed messages with an attached mail message. Privileges were dropped too early when chrooting, causing chroot to fail. Access to uninitialized data in amavis-milter was fixed. An new placeholder allows organizing a quarantine by week number. A do_ascii decoder was disabled in the default list. The use of my_require was reverted.
Release Notes: DKIM signing and verification is now natively supported. Policy banks based on DKIM-validated author address offer whitelisting and bypassing of banning checks. Backscatter bounces can be killed based on pen pals lookups. The SQL database was made partitionable. SA logging is merged with native logging, along with a SA 3.3 timing report. Messages from a quarantine can be released as attachments. Basic support for abuse reporting was added. TLS is supported. Amavisd-nanny and amavisd-agent re-open a database on amavisd restarts. p0f-analyzer.pl was updated to support source port number in queries.
Release Notes: Regular expressions were simplified to avoid Oerl crashing on very long degenerated addresses in a header. Parsing of header field names is stricter to avoid duplicating a Subject header field under rare circumstances. Policy bank name from AM.PDP protocol is now untainted to avoid SQL errors. Handling of status EAGAIN in SMTP client code was improved. The number of arguments to a file(1) utility now obeys a POSIX program argument space limit. Sprintf format for conversion of 64-bit values was fixed. AV entries for F-PROT fpscan and fpscand were added, and a BitDefender bdscan entry was updated.
Release Notes: Parsing of an SMTP status response from MTA was fixed when releasing from a quarantine for compatibility with old versions of MTA, which did not provide an enhanced status code. Rewritten parsing of Received header fields and hardened parsing of From, To, and Cc header fields, to avoid complex Perl regular expressions that could crash a process on certain degenerate cases of these header fields. Eight-bit characters in In-Reply-To and References header fields are now sanitized before using them in Pen Pals SQL lookups. The documentation section on DKIM was updated in amavisd-new-docs.html.
Release Notes: Logging to SQL in a Milter setup was fixed. Message are saved only once when an archival quarantine is co-situated with other quarantines. Statistics counters are now available for cases where a pen pal's feature has prevented a mail message from being blocked, allowing assessing usefulness of pen pals and facilitating adjusting of SA rules to minimize false positives. Incorporating additional configuration files has been made easier by a new routine include_config_files. A workaround for a crashing altermime has been provided. Two AV entries were updated. Documentation has been updated.
Release Notes: This release adds checking of a number of archive members to improve protection from runaway dearchivers. It fixes SQL quarantining of mail with a null sender, and recognizes PostgreSQL error S8006. Parsing of invalid header has been improved. Calling 'finish' on a SA message object was added. A nonstandard SMTP status code 254 is no longer used, and enforcing of option 8BITMIME is avoid even on 8-bit contents. Checking of eval status was improved to recognize additional failure modes. Disabling of MIME decoding and invoking of a file(1) utility has been made possible. An AV entry for ArcaVir was added.
Release Notes: Allows per-recipient sanitation or adding disclaimers by altermime or Anomy Sanitizer. Rewritten SMTP client code no longer uses module libnet, and now supports pipelining, IPv6, and an LMTP protocol. Phishing fraud as indicated by ClamAV is now treated as spam, not as a a virus. Hooks for custom code are provided. The pen pals feature now also matches replies referencing previous outgoing mail by its Message ID, such as replies to mailing list postings. A new concept has been introduced: a blocking contents category. Documentation for setting up amavisd-new Postfix has been rewritten.