Skip to content

Commit

Permalink
mmanon: removed the check for specific "terminator characters" after …
Browse files Browse the repository at this point in the history
…last octet

As it turned out, this didn't work in practice as there
was an enormous set of potential terminator chars -- so removing
them was the best thing to do. Note that this may change behaviour of
existing installations. Yet, we still consider this an important
bugfix, that should be applied to the stable branch.
  • Loading branch information
rgerhards committed Oct 4, 2013
1 parent d18a9df commit f86d326
Show file tree
Hide file tree
Showing 3 changed files with 9 additions and 12 deletions.
10 changes: 7 additions & 3 deletions ChangeLog
Original file line number Diff line number Diff line change
@@ -1,9 +1,13 @@
---------------------------------------------------------------------------
Version 7.4.5 [v7.4-stable] 2013-09-??
- mmanon: added "]" to set of acceptable chars after an IPv4 address
This is used in Exim and Postfix ... and probably a bunch of other tools
- mmanon: removed the check for specific "terminator characters" after
last octet. As it turned out, this didn't work in practice as there
was an enormous set of potential terminator chars -- so removing
them was the best thing to do. Note that this may change behaviour of
existing installations. Yet, we still consider this an important
bugfix, that should be applied to the stable branch.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=477
Thanks to Muri Cicanor for requesting the addition
Thanks to Muri Cicanor for initiating the discussion
- bugfix: omprog blocked signals to executed programs
The made it impossible to send signals to programs executed via
omprog.
Expand Down
9 changes: 1 addition & 8 deletions doc/mmanon.html
Original file line number Diff line number Diff line change
Expand Up @@ -18,14 +18,7 @@ <h1>IP Address Anonimization Module (mmanon)</h1>
they exist.
<p><i>How are IP-Addresses defined?</i>
<p>We assume that an IP address consists of four octets in dotted notation,
where each of the octets has a value between 0 and 255, inclusively. After
the last octet, there must be either a space or a colon. So, for example,
"1.2.3.4 Test" and "1.2.3.4:514 Test" are detected as containing valid IP
addresses, whereas this is not the case for "1.2.300.4 Test" or
"1.2.3.4-Test". The message text may contain multiple addresses. If so,
each of them is anonimized (according to the same rules).
<b>Important:</b> We may change the set of acceptable characters after
the last octet in the future, if there are good reasons to do so.
where each of the octets has a value between 0 and 255, inclusively.
<p>&nbsp;</p>

<p><b>Module Configuration Parameters</b>:</p>
Expand Down
2 changes: 1 addition & 1 deletion plugins/mmanon/mmanon.c
Original file line number Diff line number Diff line change
Expand Up @@ -307,7 +307,7 @@ anonip(instanceData *pData, uchar *msg, int *pLenMsg, int *idx)
++i;
ipstart[3] = i;
octet = getnum(msg, lenMsg, &i);
if(octet > 255 || !(msg[i] == ' ' || msg[i] == ':' || msg[i] == ']')) goto done;
if(octet > 255) goto done;
ipv4addr |= octet;

/* OK, we now found an ip address */
Expand Down

0 comments on commit f86d326

Please sign in to comment.