MFC r326074: filter all passwords (not only changed) from periodic passwd backup

The periodic 200.backup-passwd script outputs any differences it finds
in master.passwd, relative to the previous backup. It intends to elide
the encrypted password field, but previously did so only for changed
lines (i.e., those beginning with - or + in the diff).

Apply the sed expression also to unchanged lines to also elide their
passwords.

PR: 223461
Reported by: Andre Albsmeier
Sponsored by: The FreeBSD Foundation

MFC: r322726

Bring back the much more readable unified format for differences in
/etc/{group,master.passwd}. This was originally turned on for all of
/etc/{aliases,group,master.passwd} in r55196, but then backed out
only for the latter two in r56697, as the adaption of the sed(1)ing
done in r56308 was incorrect. This left us with inconsistent diff(1)
formats in the daily output of periodic(8) ever since, despite in
r56697 having been promised to be revisited. So properly adapt the
password hash filtering to the unified format and turn the later on
again for /etc/{group,master.passwd}, too.

Approved by: re (kib)

MFC r316548:

Quiet 450.status-security when *_inline="YES"

Previously, 450.status-security would always set rc=3 in inline mode,
because it doesn't know whether "periodic security" is going to find
anything interesting. But this annoyingly results in daily reports that
simply say "Security check: \n\n-- End of daily output --".

This change fixes that by testing whether "periodic security" printed
anything, and setting 450.status-security's exit status to 3 if it did. An
alternative would be to change the exit status of periodic(8) to be the
worst of its scripts' exit statuses, but that would be a more intrusive
change.

Reviewed by: brian
Differential Revision: https://reviews.freebsd.org/D10267

MFC r313069:

Allow 999.local to run scripts in any language

If one of the scripts listed in (daily|weekly|monthly)_local is executable,
999.local should simply execute it. Only if the script isn't executable
should 999.local assume it needs /bin/sh.

Reviewed by: brian
Sponsored by: Spectra Logic Corp

MFC r304162

Decrease the anti-congestion sleep in 480.leapfile-ntpd to 1 hour

24 hours is too long. Periodic scripts are executed serially, so when
combined with the sleep in 410.pkg-audit periodic could actually take more
than 24 hours and block the next invocation.

MFC r301102:

Don't rely on $ntpd_enable to periodically fetch the latest leapfile.

Suggested by: cperciva

MFC r295324: Add error check to not leak logs with syntax errors in case
of failed `zpool history`.

MFC r289421, r293037, r294773, and r294884.

ntp leap-leapseconds support.

r289421:

Add default leap-seconds file. This should help ntp networks get the
leap second date correct

Updates to the file can be obtained from ftp://time.nist.gov/pub/ or
ftp://tycho.usno.navy.mil/pub/ntp/.

r293037:

Update leap-seconds to latest. This will satisfy the ntpd leap-second
version check.

r294773:

Add support for automatic leap-second file updates.

The working copy of leapfile resides in /var/dbntpd.leap-seconds.list.
/etc/ntp/leap-seconds (periodically updated from ftp://time.nist.gov/pub/
or ftp://tycho.usno.navy.mil/pub/ntp/) contains the master copy should
automatic leapfile updates be disabled (default).

Automatic leapfile updates are fetched from $ntp_leapfile_sources,
defaulting to https://www.ietf.org/timezones/data/leap-seconds.list,
within $ntp_leapfile_expiry_days (default 30 days) from leap-seconds
file expiry. Automatic updates can be enabled by setting
$daily_ntpd_leapfile_enable="YES" in periodic.conf. To avoid congesting
the ntp leapfile source the automatic update randomized by default but
can be disabled through daily_ntpd_avoid_congestion="NO" in
periodic.conf.

r294884:

Allow specification of fetch options for ntp leap-seconds fetch.

Approved by: re (gjb)

MFH (r290743): support an exclusion regex, like security/200.chkmounts

MFC r292313:

Skip unavailable pools when running zfs pool scrubs

Approved by: rpaulo (mentor)

MFC 280721:
Allow additional flags to be passed to netstat -i in the daily status check.
In particular, this allows an administrator to specify "-h" for human
readable output if that is preferred.

The default setting passes "-d", so that can be excluded by using a custom
setting.

MFC r277216:
Evaluate running userland/kernel version in daily
periodic(8) run, taken from uname(1) '-U' and '-K'
flags.

Sponsored by: The FreeBSD Foundation

MFC r271321:

Don't cross mount boundaries when cleaning tmp files.

Approved by: re (gjb)
Relnotes: yes

Merge r257694 from head:

Remove remnants of BIND from /etc, since there is no BIND in base now.

Sorry, that would break users running head and BIND from ports, since
ports rely on these scripts. The ports will be fixed soon.

Approved by: re (kib)

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Odds and ends left over from BIND and unnoticed because they didn't
affect 'make universe'.

Approved by: re (gjb)

If daily_status_security_inline is set, the rc value needs to be
forced to 3 so that the output of this script is always displayed.
In fact, setting this flag is identical to setting
daily_status_security_output to an empty string. To make the logic
less confusing, change the behavior of daily_status_security_inline
such that it just forces daily_status_security_output to an empty
string and then applies the normal logic.

PR: conf/178611
Submitted by: Jason Unovitch <jason.unovitch@gmail.com>
MFC after: 3 days

Unconditionally install 210.backup-aliases as many MTAs other than
sendmail support the use of /etc/aliases.

PR: conf/176098
Submitted by: ak
MFC after: 2 weeks

Remove periodic script for ataraid(4) and add instead script for graid(8).

make installation of the 220.backup-pkgdb periodic script depend on PKGTOOLS
knob

Make a command for pkg_info changeable like pkg_version in
/etc/periodic/weekly/400.status-pkg to be friendly with pkgng.

MFC after: 1 week

Only output a list of file systems that need to be dumped if the system
has a non-empty dumpdates file.

Reviewed by: brooks
MFC after: 1 week

Display dropped transmit packets in the daily network interface output.

PR: conf/165956
Submitted by: Jeremy Chadwick
MFC after: 1 week

Add an option to 404.status-zfs (enabled by default) to list all
zfs pools on the system.

While here, document daily_status_zfs_enable in periodic.conf(5).

Discussed on: -fs [1]
Reviewed by: netchild [1]
Approved by: jhb
MFC after: 1 week

[1] - http://lists.freebsd.org/pipermail/freebsd-fs/2011-June/011869.html

The default setting, daily_accounting_compress="NO", was causing
only 1 old file to be saved, so fix this. Problem raised in the PR,
but actually required a different solution.

While I'm here, fix a very old off-by-one error causing 1 more file
than specified in daily_accounting_save to be saved because acct.0
was not taken into account (pun intended). Change that, and use a more
thorough method of finding old files to delete. Partly just because this
is the right thing to do, but also to silently fix the extra log that
would have been left behind forever with the previous method.

PR: conf/160848
Submitted by: Andrey Zonov <andrey@zonov.org>

Increase default scrub threshold from 30 days to 5 weeks. Using
whole weeks makes it easier to predicate when the scrub would
happen.

MFC after: 1 week

Fix error message in case the backup storage directory does not exist and
cannot be created ($daily_backup_pkgdb_dbdir -> $daily_backup_pkgdb_dir).
MFC after: 1 week

Eliminate extraneous pipelines and tr calls.

Approved by: kib (mentor)
MFC after: 3 days

Convert the allowed characters '-', '.', and ':' in a ZFS pool name to _
to avoid causing errors in the shell script.

Submitted by: William Grzybowski <william88@gmail.com>
Approved by: kib (mentor)
MFC after: 7 days
Sponsored by: iXsystems

1. If PKG_DBDIR cannot be determined from make, set the default
2. Add the -H flag to tar in case /var/db/pkg itself is a symlink
3. Direct stderr to /dev/null to suppress the leading slash warning [1]

PR: ports/156810 [1]
Submitted by: Jeremy Chadwick <freebsd@jdc.parodius.com> [1]

The security run requests unmaskable output, even if the only output is to
tell that there is a separate email or that the output is logged to a file.

This commit changes the return code for the non-inline case to tell that
this message is not important enough and can be masked if necessary. The
messages from the security checks themself are not affected by this and
show up as before in the periodic security email/file.

The inline case still requests to not mask the output, as with the current
way of handling this there is no easy way to handle this.

PR: 138692
Analysis/patch atch by: Chris Cowart <ccowart@timesinks.net>
X-MFC after: on request

Use proper return codes (valuable output, invalid config, problems).

MFC after: 1 week

Hook the 220.backup-pkgdb script I added to the build unconditionally

Hook up 610.ipf6denied based on MK_IPFILTER as 510.ipfdenied is now

Poked by: Andrzej Tobola <ato@iem.pw.edu.pl>

Add a daily period script to back up /var/db/pkg

The final product contains work from the originator, and
Florent Thoumie <florent.thoumie@gmail.com>. The final
product contains considerable re-working by me, so all
responsibility for bugs rests under my pointy hat.

PR: ports/145957
Submitted by: Eitan Adler <EitanAdlerList@gmail.com>

Add the svn:executable property to the scripts that are missing it

Update how accounting log files are rotated.

The old version had a race between the time that the old file was
cp'ed to acct.0 and the time that 'sa -s' was run that prevented
the commands that occurred in the meantime from being backed up.

It's also arguable that the old version was inefficient in using
cp which can be a problem on a space-constrained system.

This version avoids both problems, albeit it's considerably more
complicated. The advantage of putting the log rotation in the rc.d
script is that it can handle the _enable and _file questions without
having to do gymnastics to discover either value in the periodic script.

As a side effect of reviewing the rc.d script I cleaned it up a bit.

Fix logic error introduced in previous commit.
Along the way make some efficiency improvements.

Submitted by: jilles
Approved by: kib (mentor)
MFC after: 3 days

This script parses output of userland tools. In the case of a faulted
zpool the output causes the script to bail out with syntax errors.
Since a scrub of a faulted zpool is pointless, just skip over any pools
marked as such.

PR: conf/150228
Submitted by: jpaetzel
Approved by: kib (mentor)
MFC after: 3 days
MFC note: only for RELENG_8

- Change the threshold from 'running next scrub the <value+1>th day after the
last one' to 'running next scrub the <value>th day after the last one'.
- Improve wording.

Requested by: jhell <jhell@DataIX.net>
MFC after: 1 week

Connect the new script 490.status-pkg-changes (see r210863)
to the build, so it gets actually installed.

Approved by: des (mentor)
MFC after: 17 days

Add a daily script to the periodic framework that reports
changes to the package database, i.e. any packages that
have been added, updated or deleted in the past 24 hours.
The format is intentionally simple and concise.

That information is particularly useful on servers that
are maintained by multiple administrators. When someone
adds, updates or deletes a package, the others will see
it in the daily periodic output.

This script is disabled by default.

PR: conf/113913
Submitted by: olli
Approved by: des (mentor)
MFC after: 3 weeks

- add the zfs scrub script
- move the zfs status script into the MK_ZFS conditional to respect
WITHOUT_ZFS

Noticed by: Andrzej Tobola <ato@iem.pw.edu.pl>

Add a periodic zfs scrub script.

Features:
- configurable amount of days between scrubs (default value or per pool)
- do not scrub directly after pool creation (respects the configured
number of days between scrubs)
- do not scrub if a scrub is in progress
- tells how to see the status of the scrub
- tells how many days since the last scrub if it skips the scrubbing
- warns if a non-existent pool is specified explicitely
(default: no pools specified -> all currently imported pools are
handled)
- runs late in the periodic run to not slow down the other periodic daily
scripts

Discussed on: fs@

Remove trailing white space. No functional changes.

Silence warning printed by getfsspec(3) when /etc/fstab does not exist
fstab: /etc/fstab:0: No such file or directory
and from dump(8) when setfsent(3) fails due to /etc/fstab not existing:
DUMP: Can't open /etc/fstab for dump table information: No such...

This makes daily and security periodic runs somewhat cleaner in jails
which lack /etc/fstab files.

MFC after: 1 month

Rather than using both -prune (which requires directory-first tree traversal)
and -delete (which implies depth-first traversal), avoid using -delete in
favour of -execdir.

This has a side-effect of not removing directories that contain files,
even if we delete all of those files, but IMHO that's a better option
than specifying all possible local filesystem types in this script.

PR: 122811
MFC after: 3 weeks

Update this script so that it handles different ruleset failures
differently. The output now shows the ruleset and shortens to
slightly different text (using $daily_status_mail_rejects_shorten),
but it should be more descriptive.

PR: 35018
Inspired by: Mikhail Teterin - mi at aldan dot algebra dot com
MFC after: 3 weeks

add new build knobs and jigger some existing controls to improve
control over the result of buildworld and installworld; this especially
helps packaging systems such as nanobsd

Reviewed by: various (posted to arch)
MFC after: 1 month

A new configuration variable, daily_status_mail_rejects_shorten, allows
the rejected mail reports to tally the rejects per blacklist without
providing details about individual sender hosts. The default configuration
keeps the reports in their original form.

MFC after: 1 week

o Install 480.status-ntpd.

Pointed out by: Henrik Brix Anders

o Add a script to check ntpd(8) state. Default is off.

PR: conf/112604
Submitted by: Oliver Fromme
MFC after: 1 month

Add ZFS periodic scripts that monitors status of ZFS pools.

Submitted by: des

o Add missed $start variable in the grep statement back.

PR: conf/96658
Submitted by: James Snow
MFC after: 1 week

Fix output and exit status when daily_mailq_shorten is set to YES

PR: conf/93472
MFC after: 3

Add periodic scripts that check the status of graid3(8), gstripe(8)
and gconcat(8) devices, respectively.

Approved by: rwatson (mentor)

When there are no interesting information in output, exit with 0.

PR: conf/92299
Submitted by: Petr Rehor <prehor@gmail.com>
Approved by: philip (mentor)
MFC after: 3 days

o Add 406.status-gmirror, sort.

Submitted by: brueffer

Add a daily script to show the status of gmirror(8) devices.

Update the test for failed zone transfers to reflect BIND 9.3.1 semantics
Simplify the shell scripting a bit, and remove a useless grep | sed

The problem was pointed out by the PR, and I used part of the solution
suggested there, but the semantics changed again for 9.2.x -> 9.3.x.

PR: conf/74228
Submitted by: Jeremy Chadwick <freebsd@jdc.parodius.com>

Sed doesn't grok '[ \t]' -- it doesn't expand the \t :(

As there are no tabs in maillog, reduce the expression so that only spaces
are used.

Problem raised by: Leif Neland root at internet dot dk

Oops, the < in arg1=< is optional - treat it as such!

Adjust the mail reject output so that it gives an abreviated reason for the
reject. For example:

Checking for rejected mail hosts:
48 getherbalnow.info (451... resolve)
46 absorb.com (451... resolve)
4 tgmart01.codns.com (553... exist)
3 kali.com.cn (451... resolve)
2 genie.com (451... resolve)
1 zv.qy (553... exist)
1 zd.hinet.hr (553... exist)
....

The bit in parenthesis is the reject code and the last word on the line -
enough to give the admin a better chance of seeing real problems (hopefully!).

While I'm here, remove the "<" at the start of rejects coming from "from"
addresses without a name@ part.

I had to rewrite the patch given by the submitter as this script has been
sed'ified (used to be perl) and I think the reject code is useful....

PR: 17377
Idea from: root at ns dot internet dot dk
MFC after: 7 days

Collapse "fgrep | egrep | sed" down to a single sed.

This also trims extraneous commas from domain names.

MFC after: 7 days

Don't remove empty dirs if their names are in $daily_clean_tmps_ignore

Use hoststat/purgestat instead of sendmail -bh/-bH so the calls can
be properly mailwrapper'ed.

PR: conf/60676
Submitted by: Colin Percival <cperciva@daemonology.net>, maxim
MFC after: 4 days

Use %e in the date(1) format string to eliminate the sed(1) command.

Add status checking of ATA raid to the daily periodic scripts.

Remove 220.backup-distfile since it has been deleted.

Reported by: mdodd
Pointy hat to: jhb

Complete removal of 320.rdist by removing its entry from periodic.conf and
removing the related 220.backup-distfile script and associatd periodic.conf
entry.

Discussed with: obrien

320.rdist is OBE as we don't have rdist in the base system any more.

This is OBE as we don't have rdist in the base system any longer.

Do not do manually what sendmail(8) can do better automatically.
Tell sendmail to clean up its own host status cache.
The error condition handling could probably be done better.

Add support for bzip2ed log files.

Avoid using perl in the periodic & security scripts. This brings the
base system one step closer to being totally perl-free.

Approved by: re (jhb)

When considering temporary files for deletion, don't examine the mtime
and atime only, but also the ctime. Otherwise, files extracted from
tar or zip archives will immediately be declared stale since they've
got their mtime reset to the original mtime.

Reviewed by: brian
MFC after: 1 week

Make it work with POSIX sort (POS arg).
All old sorts understand -k too.

o Test and change to the correct directory, /var/spool/.hoststat
o Bring if/then style in sync with /etc/rc scripts

PR: conf/41570
Submitted by: Konstantin M Volevatch <cox@rosnet.ru>
MFC after: 1 week

Install scripts via FILES (purposedly not via SCRIPTS that would
strip the suffixes).

Return 3 unless $daily_status_security_enable != YES.
Returning $? masks security output when ``periodic security'' is successful !

MFC after: 3 days

Fix the output when daily_status_mailq_shorten is set to YES

PR: 23766
Mostly submitted by: lambert@ssabsd.csw.net
MFC after: 3 days

Handle .bz2 files created by newsyslog

PR: 37529
Partially submitted by: Peter Hollaubek <fifteen@inext.hu>
MFC after: 1 week

Update mail queue related periodic scripts to account for sendmail 8.12's
clientmqueue (submit mail queue).

The new mailq display is only active if both the old
daily_status_mailq_enable is set to "YES" and the new
daily_status_include_submit_mailq is set to "YES" so people who disabled
440.status-mailq won't have any surprises.

Likewise, the new queue run is only active if both the old
daily_queuerun_enable is set to "YES" and the new daily_submit_queuerun
is set to "YES" so people who disabled 500.queuerun won't have any
surprises.

While I am here, remove the [ ! -d /var/spool/mqueue ] checks from
both scripts as the queue directory isn't always /var/spool/mqueue for
the main daemon -- it can be set to anything in the sendmail.cf file.

MFC after: 1 week

Set rc=1 rather than 0 so that setting daily_show_success=YES masks
the output of all goes well.

PR: 34825
Submitted by: Valentin Nechayev <netch@netch.kiev.ua>
MFC after: 3 weeks

Long ago, there was just /etc/daily. Then /etc/security was split out
of /etc/daily. Some time later, /etc/daily became a set of periodic(8)
scripts. Now, this evolution continues, and /etc/security has been
broken into periodic(8) scripts to make local customization easier and
more maintainable.

Reviewed by: ru
Approved by: ru

Make sure the security check output includes a To: line in the
same way the daily run output does.

After further discussion on -CURRENT, some people (jhb) do not like
the idea of not masking passwords on comments in case the
administrator comments out an entry without clearing the
password. Instead completely ignore comments (since they have no
security impact) when doing the diff of the old and new passwd file.

Suggested by: rwatson

No need to hide stuff in the $FreeBSD$ tag or in other comments like,

Backup passwd and group files:
1c1
< # $FreeBSD:(password):09:07 peter Exp $
---
> # $FreeBSD:(password):27:16 ache Exp $

MFC after: 1 week

UUCP removal Phase III.

Run the uustat command as the uucp user, not as root.

Remove $daily_status_named_logs and figure out which /var/log/messages*
files to look an (in the same way that /etc/security does).

Don't single-quote $start, reducing it to an empty string.

MFC after: 3 days

Don't try to remove directories unless we've emptied them first

Submitted by: NIIMI Satoshi <sa2c@and.or.jp>
PR: 28355
MFC after: 1 week

Small adjustment to whitespace in output

Remove vestiges of MFS.

Default daily_accounting_flags to -q. I thought this was a typo in the
originally submitted patch (oops!).

Also check for an empty $daily_accounting_save.

Submitted by: Udo Schweigert <Udo.Schweigert@cert.siemens.de>

Add $daily_accounting_save and $daily_accounting_flags

Submitted by: Udo Schweigert <Udo.Schweigert@cert.siemens.de>
MFC after: 2 weeks

Add 470.status-named.

Reminded by: gshapiro

Fixed typo.

PR: bin/26836
Submitted by: Matthew Seaman <matthew.seaman@tornadogroup.com>

Check for denied zone transfers (AXFR and IXFR).

Add 500.queuerun

Move the sendmail -q from cron to periodic, as suggested by a few people.
This has the benefit of adding a random start time element as daily
processing takes a different amount of time on different machines.

Allow the output of /etc/security to be logged or mailed to different
users in line with ${daily,weekly,monthly}_output using a new
$daily_status_security_output variable.

PR: 24643

Handle multiple words in $daily_clean_disks_files

PR: 23805
Submitted mostly by: Norbert Papke <npapke@telus.net>

Finish the job of conditionalizing UUCP by preventing files in /etc/uucp
from being installed, and make rmail conditional on neither of
NO_SENDMAIL and NOUUCP.

PR: bin/21321
Submitted by: Me

Case is irrelevant when sorting mail redirects

PR: 21600
Submitted by: David Wolfskill <dhw@whistle.com>

Remove a forgotten line

Submitted by: Philipp Mergenthaler <un1i@rz.uni-karlsruhe.de>

Another overhaul of the periodic stuff.

All periodic sub-scripts <larf> now have their return codes interpreted
by periodic(8). Output may be masked based on variable values in
periodic.conf.

It's also now possible to email periodic output to arbitrary addresses,
or to send it to a log file, examples of which can be found in
newsyslog.conf.

The upshot of it all should be no discernable changes to the default
behaviour of periodic(8).

PR: 21250

Correct variable spelling

PR: 20841

Complete migration of aliases file to /etc/mail/aliases.
The maintainers of share/examples/diskless/README.TEMPLATING and mergemaster
have been contacted so those may be updated as well.

Correct dodgy wild card expansion

PR: 20514

Introduce a new option, daily_status_disks_df_flags, which specifies
the command-line arguments to be used for the call to df(1) when
daily_status_disks_enable is set to YES.

The name of the new variable was chosen by the maintainer of our
periodic hierarchy, Brian Somers.

PR: 19631

Add $daily_status_mail_rejects_logs, defaulting to 3 to control
how many /var/log/maillog* files to check

PR: 19587

Correct two variable names

Mostly submitted by: howardjp@wam.umd.edu
PR: 19567

Allow compressed acct files

PR: 19483
Submitted by: Ben Smithurst <ben@scientia.demon.co.uk>

daily_status_network_enable -> daily_status_network_usedns

Submitted by: Alexander Leidinger <Alexander@leidinger.net>

Introduce /etc/defaults/periodic.conf, similar in concept to rc.conf.
The only change in the default functionality should be that
the output reports are slightly more verbose WRT files deleted.

Not objected to by: freebsd-arch

Use $clear_daily_* from rc.conf to decide what should be deleted

Reviewed by: The silence of -committers

Clean /tmp and /var/tmp if $clear_tmp_enable is set to YES in rc.conf
Clean /compat/linux/tmp if $linux_enable is also set to YES in rc.conf

Revert to rev 1.3 since the sed'ing is wrong. Revisit this after 4.0-RELEASE.

Update the sed action to match the change to "diff -u".
Otherwise the encrypted password of any account who's information changed
was shown in the daily email to root.

Submitted by: jhb

Use the *much* more readable unified diff format.

"make install" did not install 150.clean-hoststat.

PR: bin/12497

$Id$ -> $FreeBSD$

Don't delete quota files when clean-tmps is enabled.

Remove remaining traces of the prototype...

Clean up persistent host status from sendmail(8) (if so configured).
I had accumulated years' worth of junk files; now others won't
have to.

Finally remove the ancient `-exec rm -f {} ;' cruft that used to be
used to cleanup old files, and replace it by -delete which has been
present in our find(1) for ages now.

UUCP Cleanup should be done by the UUCP user.

PR: bin/7749
Submitted by: Ruslan Ermilov <ru@ucb.crimea.ua>

Avoid the ``ruptime: no hosts in /var/rwho.'' message by not calling
rwho iff /var/rwho is empty. Call `uptime' instead. This doesn't
belong under `network' right away, but at least reports the same
informaton about the local system. rwhod is not turned on by default
(for good reason), and i've already seen too many of the above
messages...

Add a chkgrp run after backing up the passwd and group files.

Suggested-by: Andreas Klemm

Changed /usr/sbin/mailq to /usr/bin/mailq

Count _all_ rejects, not made by check_mail and check_relay only.
There can be private rules which produce rejects.
Pointed out by: áÎÄÒÅÊ þÅÒÎÏ×

Count hosts and sort by score.

Replace sed(1) with perl(1). The 4.4BSD sed programm is
200 times slower than perl or SunOS 5.5.1 sed.

Remove ``start='' used when testing :-(

Just list one of each domain that was rejected
(although only by Scheck_relay or Scheck_mail).
Suggested by: ache

Add an example for busy mail servers, commented out.

Do not run by default. Can grow your root mailbox up to 2Mb per day
since SPAMmers like to retry often

Check for rejected mail
Not commented on by: freebsd-hackers

Fix typo in my prev. commit

Do not remove /var/tmp/vi.recover

Cosmetic changes.
Submitted by: Philippe Charnier <charnier@xp11.frmug.org>

This commit was generated by cvs2svn to compensate for changes in r28263,
which included commits to RCS files with non-trunk default branches.