mail/tarpitd: Add new port
tarpitd answers SMTP connections and holds them open for as long as the peer
can be persuaded to wait. It is meant to sit behind a packet filter rule that
redirects known spam sources to it, in the manner of spamd(8) on OpenBSD, and
it never accepts or delivers anything.
Every reply is a syntactically valid SMTP response, so the sender has no reason
to give up, but it is written out one byte at a time and commands are read back
at the same rate. Every terminal answer is a temporary failure, so the message
stays in the sender's queue and it comes back later to be tarpitted again. The
intent is to occupy a slot in the sending botnet's delivery queue for hours
rather than to reject mail quickly.
Among its tactics are a delayed and optionally endless multiline greeting,
detection of clients that transmit before the greeting has finished, padding of
the EHLO response, a STARTTLS handshake that never completes, an AUTH honeypot
that decodes and logs the credentials bots offer, and clamped socket buffers so
the peer's window stays tiny.
[7 lines not shown]
net/norm: Bump PORTEPOCH to fix package version ordering
The previous version format (1.5r6) was incorrectly evaluated
by 'pkg version' as greater than the newer version (1.5.9).
Bump PORTEPOCH to force a proper upgrade path for existing installations.
mail/rspamd: Update to 4.2.2
Includes fixes for memory safety bugs reachable from the network
(HTTP body handling, DNS replies, UCL nesting, DKIM bh=, fuzzy TCP
sessions) and a controller fix where a malformed password hash
accepted any password.
ChangeLog: https://github.com/rspamd/rspamd/blob/4.2.2/ChangeLog
devel/R-cran-vdiffr: New port
An extension to the 'testthat' package that makes it easy to add graphical unit
tests. It provides a Shiny application to manage the test cases.
