summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-01-07add service file for starting via systemdChristoph
2015-12-10ignore .eggs folderKali Kaneko
2015-12-09[feat] use the original message for encryptionRuben Pollan
Do not reconstruct the message from the parsed one. Added test for missleading encoding. - Resolves: #7253
2015-12-09[feat] postfix lookup against couchdb for client smtp fingerprintRuben Pollan
- Resolves: #4285
2015-12-08[pkg] bump soledad-common dependencyKali Kaneko
needed because the ServerDocument refactor - Releases: 0.8.0
2015-12-04[pkg] fix outdated tac file pathKali Kaneko
2015-12-04[bug] skip fingerprint-map section for watching tooKali Kaneko
2015-12-02[bug] fix path for data filesKali Kaneko
As pointed by cz8s in https://github.com/leapcode/leap_mx/pull/75, this path was fixed in the debian branch for platform 0.7, but was never merged back onto develop.
2015-11-26Merge remote-tracking branch 'leapcode/pr/81' into developKali Kaneko
2015-11-26[doc] document the return codes of the TCP mapsRuben Pollan
- Resolves: #7271
2015-11-26[style] fix pep8 errorsRuben Pollan
2015-11-25[feat] WHEELHOUSE can be a url + --use-leap-wheelsRuben Pollan
--use-leap-wheels sets --trusted-host (remove it when we have a proper cert) and WHEELHOUSE to https://ftp.lizard.leap.se Until we get ftp.lizard cname, use lizard as the wheels server.
2015-11-24Change initscript to run leap-mx as an unpriviledged user (#7634)Micah Anderson
2015-11-23[feat] add '@deliver.local' to uuidRuben Pollan
- Resolves: #5959
2015-11-18[feat] Use syslog for loggingRuben Pollan
- Closes: #6859 - Related: #6942
2015-11-12[feat] update leap.mx usage of soledad CouchDatabaseRuben Pollan
- Related: #7565
2015-10-16ignore more thingsKali Kaneko
2015-09-15[feat] return a more meaningful msg if user exists but has no keyRuben Pollan
- Resolves: #7272
2015-09-15[test] add test infrastructureRuben Pollan
Some refactor on the couchdb usage was needed to be able to mock couchdb. - Resolves: #7435
2015-09-11[feat] Don't add any X-Leap-Provenance headerRuben Pollan
- Resolves: #7439
2015-08-04[bug] bind TCPServer to localhostKali Kaneko
currently, mx services are being bound to all the interfaces. - Resolves: #7348
2015-08-03[feat] use wheels to install dependenciesParménides GV
generate_wheels uses $WHEELHOUSE to generate and store the wheels for requirements.pip and requirements-testing.pip (if it exists). pip_install_requirements.sh installs requirements.pip from them if possible (if not, then it fetches them from pypi) or, if passed the --testing flag, it installs requirements-testing.pip. - Related: 7327
2015-07-28[tests] add pep8 to requirements-testingKali Kaneko
2015-07-27[pkg] add AUTHORS file + one-liner to generate itKali Kaneko
2015-07-27[pkg] add script to install base requirementsKali Kaneko
- update pip - install base reqs
2015-07-22[pkg] separate leap requirementsKali Kaneko
this is part of a process to make the setup of the development mode less troublesome. from now on, setting up a virtualenv in pure development mode will be as easy as telling pip to just install the external dependencies:: pip install -r pkg/requirements.pip and traversing all the leap repos for the needed leap dependencies doing:: python setup.py develop - Related: #7288
2015-05-08[bug] remove --syslog twistd optiondrebs
Currently, we don't want to log to syslog, because the platform has to be modified before we can do that (see #6942). In the future, we might want to log to syslog only, or make it optional depending on the contents of /etc/default/leap_mx. For now we just remove twistd's --syslog option from the initscript. Closes: #6937.
2015-05-05[refactor] move initscript to more sensible namedrebs
2015-04-24[feat] make log messages match postfix's configdrebs
Change the virtual alias map and the access recipien access checker log messages so they match postfix's configuration statements.
2015-04-24[pkg] remove initscript from python packagedrebs
There are some reasons to remove the initscript from the python package: 1. To include the initscript it in the python package it is necessary to assume a lot of things about the system in which the package would be installed. 2. The debian packaging system will correctly create an initscript by itself. 3. We don't have to maintain 2 different setup.py files (one in master/develop branch and another in debian package branches).
2015-04-21[pkg] fold in changes0.6.2drebs
Releases: 0.6.2
2015-04-21fixed bullet points for #Issuesvarac
2015-04-21added #Issues dection, including major bugs for 0.6.1 and 0.6varac
2015-04-20[doc] update documentationdrebs
I'm updating (1) some very outdated doc from when the program was not yet written, and (2) some small stuff inside classes docstrings.
2015-04-20[bug] implement message bouncing according to RFCsdrebs
If we do not adhere to the standads, we may have a lot of problems when bouncing a message. This commit implements a bounce message according to: * RFC 6522 - The Multipart/Report Media Type for the Reporting of Mail System Administrative Messages * RFC 3834 - Do not bounce for unknown or invalid addresses. * RFC 3464 - An Extensible Message Format for Delivery Status Notification. Closes: #6858.
2015-04-16[bug] fix extraction of uuid from message headersdrebs
Before this commit, the mail receiver system used to compare the domain of the delivery addresses found in the "Delivered-To" header to find out the final delivery address. If we assume that the mail server delivery to the spool mail directory was correct, then we have two facts: (1) the topmost "Delivered-To" header is the one that indicates the correct final delivery address; and (2) we should expect the address to be <uuid>@<domain> because of the earlier alias resolve query made by the mail server. Another problem is that the domain comparison would compare whatever is in the "Delivered-To" header with whatever the python's socket module would return, which depends on the values on /etc/hosts and the order of the values in that file. This was causing problems whenever the platform made changes in /etc/hosts. So this commit eliminates the domain check and gets the uuid from the first "Delivered-To" header found in the message. Related: #6858.
2015-04-16[bug] change default bounce message sender addressdrebs
This commit changes the bounce message sender address to be MAILER-DAEMON@domain, instead of bounce@domain. Related: #6858.
2015-04-16[bug] return uuid as result of alias resolverdrebs
This fixes a bug introduced on b0ef529cc882a96903597fb5279919969fa286c3, when the alias resolver was modified to return the user's address instead of the uuid. In order to fix this, I had to revert one of the changes made by the commit above, which is to don't make use of reduced view for the uuid query. The pgp public key query remains reduced, as implemented in the commit above. We also refactor the code a bit to allow for log messages specific to each of tcp map's sublasses. Related: #6858.
2015-04-13[bug] fix bounce message recipientdrebs
The bounce message was using the original message's "From:" header instead of the "To:" header to indicate the original recipient. This commit fixes that. Closes: #6854. Releases: 0.6.2, 0.7.0
2015-04-09[refactor] use couch reduced views for lookupsdrebs
The way uuid and pgp key were being queried by means of couch views was not efficient because they weren't using the reduce function and were filtering the views results in the python code. Also, the uuid is not actually needed to find out either if the address exists or if there's a pgp public key for that address. This commit refactors the couch helper to make use of the reduce functions in queried views and to get rid of the intermediate uuid querying.
2015-04-09[bug] limit pgp key lookup to access check serverdrebs
In order to minimize the number of couchdb queries and the number of mx lookups in case of junk mail this commit restricts the pgp key lookup to the access check server (and removes it from the alias server). Closes: #6795.
2015-03-26[docs] add leap standard commit template to repoKali Kaneko
Because in CDO we trust.
2015-03-25[refactor] separate tcp map server codedrebs
Separate the common tcp map server code, used for both alias resolver and recipient access checker, to its own file.
2015-03-25[feat] reject incoming mail if no pgp key founddrebs
Implement a PGP key lookup in the postfix smtp recipient restriction and virtual alias mapping levels. If no PGP key is found, then the address is rejected with a temporary error. Closes: #6795
2015-03-25[bug] correctly return async bouncer deferreddrebs
2015-02-11Fold in changes0.6.1Ivan Alejandro
2015-02-06Retry watching dirs if failed for some reason (closes #6687).drebs
2015-02-05Add ability to trigger processing on SIGUSR1 (Related: #2591)Kali Kaneko
2015-02-05Process unprocessed mail when MX starts (closes #2591).drebs
2015-01-12sync initscript with debian versionMicah Anderson