head	1.1;
access;
symbols
	pkgsrc-2024Q1:1.1.0.16
	pkgsrc-2024Q1-base:1.1
	pkgsrc-2023Q4:1.1.0.14
	pkgsrc-2023Q4-base:1.1
	pkgsrc-2023Q3:1.1.0.12
	pkgsrc-2023Q3-base:1.1
	pkgsrc-2023Q2:1.1.0.10
	pkgsrc-2023Q2-base:1.1
	pkgsrc-2023Q1:1.1.0.8
	pkgsrc-2023Q1-base:1.1
	pkgsrc-2022Q4:1.1.0.6
	pkgsrc-2022Q4-base:1.1
	pkgsrc-2022Q3:1.1.0.4
	pkgsrc-2022Q3-base:1.1
	pkgsrc-2022Q2:1.1.0.2
	pkgsrc-2022Q2-base:1.1;
locks; strict;
comment	@# @;


1.1
date	2022.05.12.13.49.28;	author jperkin;	state Exp;
branches;
next	;
commitid	9WqyyuNxe71AQLDD;


desc
@@


1.1
log
@opendmarc: Update to 1.4.2 and overhaul package.

pkgsrc changes:

  * Use PKG_SYSCONFSUBDIR, there are a number of extra files supported in
    the configuration file so everything should live in a sub-directory.

    HEADS-UP! Users will need to migrate over to new config file location.

  * Create opendmarc user/group, not currently used in rc.d script.

  * Fix build on SunOS and add SMF support.

  * Split multi-file patch correctly into separate files.

  * Add TEST_TARGET.

  * Various pkglint and cleanup.

opendmarc changes:

1.4.2           2021/12/19
        Fix issue #175: Don't reject a multi-valued From when all of the
                domains match.
        Fix issue #179: Don't crash when a value in a multi-valued From field
                is missing a domain name.  Resolves CVE-2021-34555.
@
text
@$NetBSD$

Add RequiredFrom option to reject messages that lack a From header from which
a valid domain can be extracted.

Submitted upstream https://github.com/trusteddomainproject/OpenDMARC/pull/147

--- opendmarc/opendmarc.conf.5.in.orig	2021-12-20 06:40:37.000000000 +0000
+++ opendmarc/opendmarc.conf.5.in
@@@@ -288,6 +288,14 @@@@ failing this test are rejected without f
 field from which no domain name could be extracted will also be rejected.
 
 .TP
+.I RequiredFrom (Boolean)
+If set, the filter will reject without further processing messages that lack a
+From: field from which a domain name could be extracted. This options is
+without effect if
+.I RequiredHeaders
+is set to "true".
+
+.TP
 .I Socket (string)
 Specifies the socket that should be established by the filter to receive
 connections from
@