Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 29 Apr 2008 18:11:05 GMT
From:      Michael Scheidell <scheidell@secnap.net>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/123227: upgade: amavisd-new to 2.6.0
Message-ID:  <200804291811.m3TIB571053588@www.freebsd.org>
Resent-Message-ID: <200804291820.m3TIK0C6028058@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         123227
>Category:       ports
>Synopsis:       upgade: amavisd-new to 2.6.0
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Tue Apr 29 18:20:00 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Michael Scheidell
>Release:        6.3
>Organization:
SECNAP Network Security
>Environment:
all.
>Description:
Amavisd-new has released a new version: 2.6.0
This version has sql and config incompatibilities with earlier versions.
Upgrading must take into account new sql schema and options.
these are outlined in /usr/ports/UPDATING (patch), and in RELEASE_NOTES

MAIN NEW FEATURES SUMMARY

- integrated DKIM signing and verification; see section
  A QUICK START TO DKIM SIGNING by the end of this release note;
- loading of policy banks based on valid DKIM-signed author's address
  can be used for reliable whitelisting, for bypassing banned checks, etc.
- bounce killer feature: uses a pen pals SQL lookup to check inbound DSN;
- SQL logging and quarantining tables have a new field 'partition_tag';
- captures SpamAssassin logging, more flexibility specifying SA log areas;
- collects and logs SpamAssassin timing breakdown report (requires SA 3.3);
- releasing from a quarantine can push a released message to an attachment;
- new experimental code for abuse reporting using formats: ARF/attach/plain;
- TLS support on the SMTP client and server side;
- connection caching by a SMTP client;
- amavisd-nanny and amavisd-agent now re-open a database on amavisd restarts;
- amavisd-nanny and amavisd-agent new command line option: -c count;
- updated p0f-analyzer.pl to support source port number in queries;
- amavisd can send queries either to p0f-analyzer.pl or directly to p0f;


>How-To-Repeat:
na.
>Fix:
patch:
diff -bBru /var/tmp/amavisd254/ ./
diff -bBru /var/tmp/amavisd254/Makefile ./Makefile
--- /var/tmp/amavisd254/Makefile        2008-03-19 11:20:26.000000000 -0400
+++ ./Makefile  2008-04-29 14:01:29.000000000 -0400
@@ -7,7 +7,7 @@
 # Based on amavisd ports makefile.
 
 PORTNAME=      amavisd-new
-PORTVERSION=   2.5.4
+PORTVERSION=   2.6.0
 PORTEPOCH=     1
 CATEGORIES=    security
 MASTER_SITES=  http://www.ijs.si/software/amavisd/ \
@@ -28,7 +28,8 @@
                ${SITE_PERL}/${PERL_ARCH}/Time/HiRes.pm:${PORTSDIR}/devel/p5-Time-HiRes \
                ${SITE_PERL}/IO/Wrap.pm:${PORTSDIR}/devel/p5-IO-stringy \
                ${SITE_PERL}/IO/Socket/INET6.pm:${PORTSDIR}/net/p5-IO-INET6 \
-               p5-Net-Server>=0.93:${PORTSDIR}/net/p5-Net-Server
+               p5-Net-Server>=0.93:${PORTSDIR}/net/p5-Net-Server \
+               p5-Mail-DKIM>=0.31:${PORTSDIR}/mail/p5-Mail-DKIM
 
 USE_PERL5_RUN= 5.8.2+
 GNU_CONFIGURE= yes
@@ -210,6 +211,15 @@
 RUN_DEPENDS+=  ${LOCALBASE}/bin/tnef:${PORTSDIR}/converters/tnef
 .endif
 
+pre-fetch:
+       @${ECHO} ""
+       @${ECHO} " **** UPGRADE WARNING:  SQL SCHEMA CHANGED ****"
+       @${ECHO} " If you are upgrading from version prior to 2.6.0"
+       @${ECHO} " Hit ^c now and read /usr/ports/UPDATING section or"
+       @${ECHO} " /usr/local/share/doc/amavisd-new/RELEASE_NOTES"
+       @read -p "Hit ^c now to stop, any key to continue: " -t 5 a || true
+       @${ECHO} ""
+
 post-patch:
 .for f in amavisd.conf amavisd.conf-sample amavisd amavisd-agent amavisd-nanny amavisd-release
        @${REINPLACE_CMD} "s@'zoo'\]@['zoo','unzoo'] ]@" ${WRKSRC}/${f}
diff -bBru /var/tmp/amavisd254/distinfo ./distinfo
--- /var/tmp/amavisd254/distinfo        2008-03-19 11:20:26.000000000 -0400
+++ ./distinfo  2008-04-29 13:43:46.000000000 -0400
@@ -1,3 +1,3 @@
-MD5 (amavisd-new-2.5.4.tar.gz) = 9d482cb555e1e8c0834db6b90843b4a4
-SHA256 (amavisd-new-2.5.4.tar.gz) = 1b8410f023c94dcce61b0510fc737106f4c35a8cffee81c19364cdb86c48af2b
-SIZE (amavisd-new-2.5.4.tar.gz) = 791835
+MD5 (amavisd-new-2.6.0.tar.gz) = 71761c55054095279bda559177682164
+SHA256 (amavisd-new-2.6.0.tar.gz) = e979be2db9d28c2c44293245394c5001cd9a94bbdd0ca3f3b45eac5e7a91521a
+SIZE (amavisd-new-2.6.0.tar.gz) = 906076


diff -bBru /var/tmp/UPDATING /usr/ports/UPDATING 
--- /var/tmp/UPDATING   2008-04-27 01:05:19.000000000 -0400
+++ /usr/ports/UPDATING 2008-04-29 14:05:54.000000000 -0400
@@ -6,6 +6,32 @@
 time you update your ports collection, before attempting any port
 upgrades.
 
+20080429:
+  AFFECTS: users of secutity/amavisd-new
+  AUTHOR: scheidell@secnap.net
+
+  Amavisd-new 2.6.0 introduces several incompatibilities with prior versions.
+  If you are upgrading from 2.5.4 or earlier, you will need to update your
+  sql schema.  If you have third party programs that access sql tables, you
+  will need to update those also.
+
+COMPATIBILITY WITH 2.5.4
+
+- when using SQL for logging (e.g. for a pen pals feature) or for
+  quarantining, SQL tables tables maddr, msgs, msgrcpt and quarantine need
+  to be extended by a new field 'partition_tag';  see below for details;
+
+- when SQL logging (pen pals) or SQL lookups are used, one can choose a
+  binary or a character data type for fields users.email, mailaddr.email,
+  and maddr.email; now may be a good opportunity to change a data type
+  to binary (string of bytes);  see below for details;
+
+- when using SQL for logging, a default for $sql_clause{'upd_msg'}
+  has changed, so if a configuration file replaces this SQL clause
+  by a non-default setting, it needs to be updated;
+
+  Full information in /usr/local/share/doc/amavisd-new/RELEASE_NOTES
+
 20080426:
   AFFECTS: users of www/phpgedview
   AUTHOR: beech@FreeBSD.org


>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200804291811.m3TIB571053588>