Files
parsedmarc/CHANGELOG.md
T
2018-09-16 22:51:49 -04:00

227 lines
4.4 KiB
Markdown

4.0.0
-----
- Add support for sending DMARC reports to a Splunk HTTP Events
Collector (HEC)
- Use a browser-like `User-Agent` when downloading the Public Suffix List, to
avoid being blocked by security proxies
3.9.7
-----
- Completely reset IMAP connection when a broken pipe is encountered
3.9.6
-----
- Finish incomplete broken pipe fix
3.9.5
-----
- Refactor to use a shared IMAP connection for inbox watching and message
downloads
- Gracefully recover from broken pipes in IMAP
3.9.4
-----
- Fix moving/deleting emails
3.9.3
-----
- Fix crash when forensic recorts are missing `Arrival-Date`
3.9.2
-----
- Fix PEP 8 spacing
- Update build script to fail when CI tests fail
3.9.1
-----
- Use `COPY` and delete if an IMAP server does not support `MOVE`
(closes issue #9)
3.9.0
-----
- Reduce IMAP `IDLE` refresh rate to 5 minutes to avoid session timeouts in
Gmail
- Fix parsing of some forensic/failure/ruf reports
- Include email subject in all warning messages
- Fix example NGINX configuration in the installation documentation
(closes issue #6)
3.8.2
-----
- Fix `nameservers` option (mikesiegel)
- Move or delete invalid report emails in an IMAP inbox (closes issue #7)
3.8.1
-----
- Better handling of `.msg` files when `msgconvert` is not installed
3.8.0
-----
- Use `.` instead of `/` as the IMAP folder hierarchy separator when `/`
does not work - fixes dovecot support (#5)
- Fix parsing of base64-encoded forensic report data
3.7.3
-----
- Fix saving attachment from forensic sample to Elasticsearch
3.7.2
-----
- Change uses uses of the `DocType` class to `Document`, to properly support `elasticsearch-dsl` `6.2.0` (this also fixes use in pypy)
- Add documentation for installation under pypy
3.7.1
-----
- Require `elasticsearch>=6.2.1,<7.0.0` and `elasticsearch-dsl>=6.2.1,<7.0.0`
- Update for class changes in `elasticsearch-dsl` `6.2.0`
3.7.0
-----
- Fix bug where PSL would be called before it was downloaded if the PSL was
older than 24 Hours
3.6.1
-----
- Parse aggregate reports with missing SPF domain
3.6.0
-----
- Much more robust error handling
3.5.1
-----
- Fix dashboard message counts for source IP addresses visualizations
- Improve dashboard loading times
- Improve dashboard layout
- Add country rankings to the dashboards
- Fix crash when parsing report with empty <auth_results></auth_results>
3.5.0
-----
- Use Cloudflare's public DNS resolvers by default instead of Google's
- Fix installation from virtualenv
- Fix documentation typos
3.4.1
-----
- Documentation fixes
- Fix console output
3.4.0
-----
- Maintain IMAP IDLE state when watching the inbox
- The `-i`/`--idle` CLI option is now `-w`/`--watch`
- Improved Exception handling and documentation
3.3.0
-----
- Fix errors when saving to Elasticsearch
3.2.0
-----
- Fix existing aggregate report error message
3.1.0
-----
- Fix existing aggregate report query
3.0.0
-----
### New features
- Add option to select the IMAP folder where reports are stored
- Add options to send data to Elasticsearch
### Changes
- Use Google's public nameservers (`8.8.8.8` and `4.4.4.4`)
by default
- Detect aggregate report email attachments by file content rather than
file extension
- If an aggregate report's `org_name` is a FQDN, the base is used
- Normalize aggregate report IDs
2.1.2
-----
- Rename `parsed_dmarc_forensic_reports_to_csv()` to
`parsed_forensic_reports_to_csv()` to match other functions
- Rename `parsed_aggregate_report_to_csv()` to
`parsed_aggregate_reports_to_csv()` to match other functions
- Use local time when generating the default email subject
2.1.1
-----
- Documentation fixes
2.1.0
-----
- Add `get_report_zip()` and `email_results()`
- Add support for sending report emails via the command line
2.0.1
-----
- Fix documentation
- Remove Python 2 code
2.0.0
-----
### New features
- Parse forensic reports
- Parse reports from IMAP inbox
### Changes
- Drop support for Python 2
- Command line output is always a JSON object containing the lists
`aggregate_reports` and `forensic_reports`
- `-o`/`--output` option is now a path to an output directory, instead of an
output file
1.1.0
-----
- Add `extract_xml()` and `human_timespamp_to_datetime` methods
1.0.5
-----
- Prefix public suffix and GeoIP2 database filenames with `.`
- Properly format errors list in CSV output
1.0.3
-----
- Fix documentation formatting
1.0.2
-----
- Fix more packaging flaws
1.0.1
-----
- Fix packaging flaw
1.0.0
-----
- Initial release