bug 64133

6 files changed, 41 insertions, 4 deletions

diff --git a/mail-filter/spamassassin/ChangeLog b/mail-filter/spamassassin/ChangeLog
index 1a401b0fca17..99cfa54cc176 100644
--- a/mail-filter/spamassassin/ChangeLog
+++ b/mail-filter/spamassassin/ChangeLog
@@ -1,6 +1,14 @@
 # ChangeLog for mail-filter/spamassassin
 # Copyright 2002-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/ChangeLog,v 1.17 2004/10/26 23:39:42 mcummings Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/ChangeLog,v 1.18 2004/12/20 10:13:56 mcummings Exp $
+
+*spamassassin-3.0.1 (20 Dec 2004)
+
+  20 Dec 2004; Michael Cummings <mcummings@gentoo.org>
+  files/3.0.0-spamd.conf, files/spamd.conf, spamassassin-3.0.0-r1.ebuild,
+  spamassassin-3.0.0.ebuild, spamassassin-3.0.1.ebuild:
+  Added note regarding potential for DoS against spamd when used against an
+  untrusted network. Should resolve bug 64133 for now.
 
   26 Oct 2004; Michael Cummings <mcummings@gentoo.org> :
   Bug 68841. - excessive memory-usage fixes - bug fixed which stopped DCC, Pyzor
diff --git a/mail-filter/spamassassin/files/3.0.0-spamd.conf b/mail-filter/spamassassin/files/3.0.0-spamd.conf
index 8cb93f8ed036..4ede33ecb769 100644
--- a/mail-filter/spamassassin/files/3.0.0-spamd.conf
+++ b/mail-filter/spamassassin/files/3.0.0-spamd.conf
@@ -1,5 +1,12 @@
 # Config file for /etc/init.d/spamd
 
+
+# ***WARNING***
+# spamd was not designed to listed to an untrusted network. spamd
+# is vulnerable to DoS attacks (and eternal doom) if used to listen
+# to an untrusted network.
+#
+
 # Some options:
 #
 # -c          to create a per user configuration file
diff --git a/mail-filter/spamassassin/files/spamd.conf b/mail-filter/spamassassin/files/spamd.conf
index c953bcb64d3b..8705c5f60fe7 100644
--- a/mail-filter/spamassassin/files/spamd.conf
+++ b/mail-filter/spamassassin/files/spamd.conf
@@ -1,5 +1,12 @@
 # Config file for /etc/init.d/spamd
 
+# ***WARNING***
+# spamd was not designed to listed to an untrusted network. spamd
+# is vulnerable to DoS attacks (and eternal doom) if used to listen
+# to an untrusted network.
+#
+
+
 # Some options:
 #
 # -a for auto-white-list
diff --git a/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild b/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild
index 62cc91425c56..bd9532ef6199 100644
--- a/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild
+++ b/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild,v 1.2 2004/10/16 14:02:51 mcummings Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild,v 1.3 2004/12/20 10:13:56 mcummings Exp $
 
 inherit perl-module
 
@@ -194,5 +194,10 @@ pkg_postinst() {
 	einfo "If upgraded from 2.x, please read the file"
 	einfo "  /usr/share/doc/${PF}/UPGRADE.gz"
 	einfo
+	ewarn 
+	ewarn "spamd is not designed to listen to an untrusted network"
+	ewarn "and is vulnerable to DoS attacks (and eternal doom) if"
+	ewarn "configured to do so"
+	ewarn
 }
 
diff --git a/mail-filter/spamassassin/spamassassin-3.0.0.ebuild b/mail-filter/spamassassin/spamassassin-3.0.0.ebuild
index cf711323ebbe..a0fb901a666c 100644
--- a/mail-filter/spamassassin/spamassassin-3.0.0.ebuild
+++ b/mail-filter/spamassassin/spamassassin-3.0.0.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.0.ebuild,v 1.3 2004/09/24 16:22:47 mcummings Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.0.ebuild,v 1.4 2004/12/20 10:13:56 mcummings Exp $
 
 inherit perl-module
 
@@ -199,5 +199,10 @@ pkg_postinst() {
 	einfo "If upgraded from 2.x, please read the file"
 	einfo "  /usr/share/doc/${PF}/UPGRADE.gz"
 	einfo
+	ewarn 
+	ewarn "spamd is not designed to listen to an untrusted network"
+	ewarn "and is vulnerable to DoS attacks (and eternal doom) if"
+	ewarn "configured to do so"
+	ewarn
 }
 
diff --git a/mail-filter/spamassassin/spamassassin-3.0.1.ebuild b/mail-filter/spamassassin/spamassassin-3.0.1.ebuild
index fe8168a85085..b704f18298e4 100644
--- a/mail-filter/spamassassin/spamassassin-3.0.1.ebuild
+++ b/mail-filter/spamassassin/spamassassin-3.0.1.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.1.ebuild,v 1.1 2004/10/26 23:39:42 mcummings Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.1.ebuild,v 1.2 2004/12/20 10:13:56 mcummings Exp $
 
 inherit perl-module
 
@@ -197,5 +197,10 @@ pkg_postinst() {
 	einfo "If upgraded from 2.x, please read the file"
 	einfo "  /usr/share/doc/${PF}/UPGRADE.gz"
 	einfo
+	ewarn 
+	ewarn "spamd is not designed to listen to an untrusted network"
+	ewarn "and is vulnerable to DoS attacks (and eternal doom) if"
+	ewarn "configured to do so"
+	ewarn
 }