qSheff / News: Recent posts

Changelog:

* 2.1-r2
- Fixed some typos about the custom prog feature. (simsek, 2006/08/25)
http://www.enderunix.org/bugzilla/show_bug.cgi?id=2
- the quarantine problem fixed. (simsek, 2006/08/09)
http://www.enderunix.org/bugzilla/show_bug.cgi?id=10
- Now qSheff can handle separate blackhole for spams and viruses. (simsek, 2006/07/22)
http://www.enderunix.org/bugzilla/show_bug.cgi?id=4

This release is the most stable release of the 2.x series of qsheff.
This release forked as qsheff-II from qsheff tree. Thus configuration files are located in etc/qsheff-II.

http://cvsweb.enderunix.org/

qsheff 2.1 has gone through varios code optimizations and new features are added.

ChangeLog is as follows:

- Source code forked as qsheff-II (simsek, 2006/02/29)
- Source tree was all arranged. Codes are moved to src/ directory (simsek, 2006/02/29)
- Subject filter has changed as flexible header filter (simsek, 2006/02/29)
- Solved spool directory growth problem (simsek, 2006/03/14)
- snprintf problem seen in Linux has solved (simsek, 2006/03/14)
- Clamd permission problem solved (simsek, 2004/03/22)
- djb.c that contains DJB codes was added (simsek, 2004/03/22)
- Passing parameters to external sofwares are added (simsek, 2006/04/07)
- wblist module was deleted (simsek, 2006/04/08)
- Ignore list was added (simsek, 2006/04/09)
- External program interface is improved (simsek, 2006/04/09)
- Virus labeling feature was added (simsek, 2006/04/27)
- X-qSheff-Match header was added (simsek, 2006/04/27)
- Sysloging capability was added along with previous qsheff.log file (simsek, 2006/04/28)
- autotools macros are rewritten (simsek, 2006/04/29)... read more

After a hard work that lasts 1.5 year qsheff has become the most
functional content filter and with this release it offers these functionalities:

* Direct connection to ClamAv Antivirus daemon over socket.
* Custom message return option instead of qmail "permanently" error.
* Subject tagging for spam mails.
* Could filter or skip local users.
* Supporting qmailqueue patch.
* Executing antivirus program
* Filtering by subject
* Filtering by body
* Filtering by header lines.
* Regular expressions support.
* Attachment blocking by filenames and extensions
* White/Black list support.
* (network, IP, domain and e-mail address based blocking or permitting)
* Could save all incoming/outgoing mail trafic or just rejected emails
* Single line logging
* Blackhole -- option to return nothing when a virus or spam is found
* Blocking e-mails of broken headers
* Easy installation by the GNU autotools
* Monitoring SPAM traffic with MRTG
* Extendable, fast and simple code
* Easy debugging, bug tracking... read more

Here is the change logs.

* 1.0-r5
- Internal ClamAv daemon interface. qsheff.log includes virus name. (simsek, 2006/27/01)
- Not logging MAILER-DAEMON mails. (simsek, 2006/27/01
- Introduced qsheff directory. /var/qsheff (simsek, 2006/26/01)
- Backup and quarantine options. (simsek, 2006/26/01)
- Fixed logical error in quarantine and save_all. (simsek, 2006/26/01)
- drop_empty_to chaned to drop_empty_line which includes From: line too. (simsek, 2006/26/01)
- Attach filter is now case insensitive. (simsek, 2005/11/20)

Hello,

I am glad to announce new qsheff version. I recommend this version. What is new in this version:

- Fixed some memory leak errors and some other warnings.
- Separated wblist for incoming and outgoing mails.
- Added wilcard domain name support as well as exact domain names.

With this version i hope qsheff will not leave any file under spool directory.

Following is from UPGRADE

The most significant changes are in the white/black list module.... read more

- Could perform filtering in the message header.
- Could drop empty To lines.
- Using install/uninstall scripts for flexible installation. (It is comfortable with FreeBSD ports)

Here is changelog:

- Recvfrom ip is getting from qmail environment during SMTP dialog. (simsek, 2005/07/08)
- Added debug level options. (simsek, 2005/07/08)

Many new features coming with this version.
I tested it for a long time, but it need more tests.
It is enough stable to use on production environments.
If you use free software always take your own risk.

Here is from ChangeLog:

* 1.0b (2005/06/23)
- Could perform body scanning.
- Could check the attachments.
- Logs the spam word itself along with the rule used to identify this word.
- Also logs emails other than spam ones.
- Could define custom filter program for your custom necessity.
- [n?] like rule forms is not supported any more. It supports just [?]
- Could save all incoming/outgoing emails. (For debugging purpose, be carefull!!!)... read more

Abstract

wblist is one of the qsheff modules, provides white/black lists and from/to/recvfrom based access lists.
Hasan Ahlatci found a bug described below:

Problem

If To: line is empty program will crash. As result, program will loose the control. So it cannot deliver
e-mail and cannot remove workdir.

Note that, if the sender fill only Bcc or CC lines, To: line will be empty.

Affected versions
=================... read more

From changelog:

- Smtp parser has renewed. It uses Sheff's parser
- Smtp parser does not look for HELO in header lines. (For spamass users)
- wblist couldn't handle @domain.com rules. Fixed.

Many thanks to Doruk Fisek who is translator.

http://www.enderunix.org/qsheff/manual-en/

qsheff couldn't remove files under /var/tmp/qsheff that starts with dot(.) (thanks to Huseyin Yuce is the reporter)

i fixed rrm_dir() in toolkit.c

This is a minor bug. Please check /var/tmp/qsheffq directory. There may be a lot of directories that are contain dot files. I uploaded a revision version (0.8-r3)

- Stop qmail
- Wait, be sure all qsheff processes are ended. (ps -ef|grep qsheff)
- rm -rf /var/tmp/qsheffq/*
- wget http://www.enderunix.org/qsheff/qsheff-0.8-r3.tar.gz
- tar -zxvf qsheff-0.8-r3.tar.gz
- cd qsheff-0.8-r3
- ./share/uninstall.sh
- ./install.sh
- Start qmail... read more

EnderUNIX Software Development Team announces qsheff 0.8 stable.

Many NEW features are provided:

- Detailed logging
- Regular expression matching, subject filters
- Dropping mails with malformed headers
- White/Black lists
- Interoperability with various Antivirus / Spam software
- MRTG reporting of spammer avctivity

qSheff has been promoted to the STABLE state with the new release.

Best regards,... read more

qSheff 0.8 will be out after this candidate. Please test it.

- Code improvements, ready for stable release
- Checking against unsafe∅ headers
- White/Black List
- Nice Logging for system administrators
- Subject Filter with regular expressions, added qsheff.rules
- Generic wrapper that supports any spammer or any antivirus
- Blackhole against random generated sender adresses

At last, qsheff-0.8b ready for your opinions. I'm sorry for delay. I was too
busy last month.

Please visit http://www.enderunix.org/qsheff/ and download RC1.

After your opinions, i'll release it as 0.8b.

Best regards.

Baris Simsek
http://www.acikkod.org
http://www.enderunix.org/simsek

i uploaded qSheff web pages as qSheff-html -20041020.tar.gz

please translate it to your language for supporting your language.

check http://www.enderunix.org/qsheff

There is no new features. Only code improvement. Please see CHANGELOG.

qSheff is still distributing under beta status.