The release of the Rspamd 3.0 spam filtering system has been announced, providing tools to evaluate messages based on various criteria, including rules, statistical methods, and blacklists, which are used to generate the overall weight of the message for making blocking decisions. Rspamd supports nearly all features implemented in SpamAssassin and includes several enhancements that enable email filtering to be approximately 10 times faster than SpamAssassin while also delivering better quality filtering. The system's code is written in C and is distributed under the Apache 2.0 license.
Rspamd is built using an event-driven architecture and is initially designed for use in high-load systems, allowing the processing of hundreds of messages per second. The rules for identifying spam characteristics are highly flexible and can be expressed in simple forms using regular expressions, while more complex situations can be written in Lua. Functionality expansion and the addition of new types of checks are implemented through modules that can be created in C and Lua. For example, there are modules available for sender verification using SPF and sender authentication via DKIM, as well as querying DNSBL lists. domain An administrative web interface is provided to simplify configuration, rule creation, and statistics tracking.
The significant version increase is associated with substantial changes to the internal architecture, particularly regarding HTML parsing, which has been completely rewritten. The new parser analyzes HTML using a DOM model and constructs a tag tree. The new release also introduces a CSS parser that, combined with the new HTML parser, allows for the correct extraction of data from emails with modern HTML markup, distinguishing between visible and invisible content. Notably, the parser code is written not in C but in C++17, requiring a compiler that supports this standard for building.
Other innovations:
- Support for the Amazon Web Services (AWS) API has been added, allowing direct access to Amazon's cloud services from the Lua API. An example plugin is provided, which saves all messages to Amazon S3 storage.
- The report generation code related to DMARC technology has been revamped. The functionality for sending reports has been moved to a separate command: spamadm dmarc_report.
- Support for 'DMARC munging' has been added for mailing lists, replacing the From address in messages with the mailing address if correct DMARC rules are set for the message.
- The external_relay plugin has been added to address the problem of using trusted email relays instead of the sender's address in plugins like SPF. an IP address The command 'rspamadm bayes_dump' has been added for saving and loading Bayesian tokens, which allows transferring them between different instances of Rspamd.
- A plugin for supporting the Pyzor spam collaboration blocking system has been added.
- Monitoring tools have been reworked to be called less frequently and create less load on external modules.
- Release of the office suite LibreOffice 7.2
Source: opennet.ru
