Tso tawm spam filtering system SpamAssassin 3.4.3

Tom qab ib xyoos ntawm kev loj hlob muaj tso tawm ntawm spam filtering platform - Spam Assassin 3.4.3. SpamAssassin siv txoj hauv kev los txiav txim siab seb puas yuav thaiv: cov lus yuav raug kuaj xyuas ntau yam (kev txheeb xyuas cov ntsiab lus, cov npe DNSBL dub thiab dawb, cov neeg kawm Bayesian classifiers, kos npe kos npe, xa cov ntawv pov thawj siv SPF thiab DKIM, thiab lwm yam). Tom qab ntsuas cov lus siv ntau txoj hauv kev, ib qho hnyav coefficient tau sau. Yog hais tias tus lej coefficient dhau ntawm qhov pib, cov lus raug thaiv lossis cim tias spam. Cov cuab yeej rau kev hloov kho cov cai lim tau txais kev txhawb nqa. Lub pob tuaj yeem siv rau ntawm ob tus neeg siv khoom thiab lub tshuab server. SpamAssassin code yog sau rau hauv Perl thiab muab faib raws li Apache daim ntawv tso cai.

nta tawm tshiab:

  • Ntxiv cov plugin tshiab OLEVBMacro, tsim los ntes OLE macros thiab VB code hauv cov ntaub ntawv;
  • Qhov ceev thiab kev ruaj ntseg ntawm scanning loj emails tau txhim kho nrog cov chaw body_part_scan_size thiab
    rawbody_part_scan_size nqis;

  • Kev them nyiaj yug rau tus chij "nosubject" tau ntxiv rau cov kev cai rau kev ua lub cev ntawm tsab ntawv kom tsis txhob tshawb nrhiav Subject header ua ib feem ntawm cov ntawv hauv lub cev ntawm tsab ntawv;
  • Rau kev nyab xeeb vim li cas, qhov 'sa-update --allowplugins' xaiv tau raug deprecated;
  • Ib lo lus tseem ceeb tshiab "subjprefix" tau muab tso rau hauv qhov chaw kom ntxiv cov lus ua ntej rau cov ntsiab lus ntawm tsab ntawv thaum txoj cai raug tsim. Cov "_SUBJPREFIX_" tag tau ntxiv rau cov qauv, qhia txog tus nqi ntawm qhov "subjprefix" chaw;
  • Qhov kev xaiv rbl_headers tau ntxiv rau DNSEval plugin los txhais cov headers uas daim tshev yuav tsum tau siv rau hauv RBL cov npe;
  • Ntxiv check_rbl_ns_from muaj nuj nqi los xyuas cov DNS neeg rau zaub mov hauv cov npe RBL. Ntxiv check_rbl_rcvd muaj nuj nqi los xyuas cov npe lossis IP chaw nyob los ntawm txhua qhov Tau txais headers hauv RBL;
  • Cov kev xaiv tau ntxiv rau qhov check_hashbl_emails muaj nuj nqi los txiav txim siab cov headers uas nws cov ntsiab lus yuav tsum tau kuaj xyuas hauv RBL lossis ACL;
  • Ntxiv check_hashbl_bodyre muaj nuj nqi los tshawb xyuas lub cev ntawm email siv cov lus qhia tsis tu ncua thiab tshawb xyuas qhov pom qhov sib tw hauv RBL;
  • Ntxiv check_hashbl_uris muaj nuj nqi txhawm rau txheeb xyuas URLs hauv lub cev ntawm email thiab xyuas lawv hauv RBL;
  • Ib qhov tsis zoo (CVE-2018-11805) tau raug kho uas tso cai rau cov lus txib kom raug tua los ntawm CF cov ntaub ntawv (SpamAssassin configuration files) yam tsis muaj kev qhia txog lawv qhov kev tua;
  • Qhov tsis zoo (CVE-2019-12420) uas tuaj yeem siv los ua kom tsis lees paub kev pabcuam thaum ua haujlwm email nrog cov ntu tshwj xeeb tsim Multipart tau raug kho.

Cov neeg tsim tawm SpamAssassin kuj tau tshaj tawm txog kev npaj ntawm 4.0 ceg, uas yuav ua tiav kev ua tiav hauv UTF-8. Thaum Lub Peb Hlis 2020, 1, kev tshaj tawm cov cai nrog kos npe raws li SHA-3.4.2 algorithm tseem yuav tso tseg (hauv kev tso tawm 1, SHA-256 tau hloov los ntawm SHA-512 thiab SHA-XNUMX hash functions).

Tau qhov twg los: opennet.ru

Ntxiv ib saib