SpamAssassin 3.4.3 Mwepụta nzacha spam

Mgbe otu afọ mmepe gasịrị dị ntọhapụ nke ikpo okwu nzacha spam - Onye SpamAssassin 3.4.3. SpamAssassin na-emejuputa usoro agbakwunyere iji kpebie ma ọ ga-egbochi: a na-edobe ozi ahụ n'ọtụtụ nlele (nyocha ọnọdụ, DNSBL black and white lists, zụrụ Bayesian classifiers, mbinye aka mbinye aka, onye na-ezipụ nkwenye site na iji SPF na DKIM, wdg). Mgbe nyochachara ozi ahụ site na iji ụzọ dị iche iche, a na-akwakọba ọnụ ọgụgụ dị arọ. Ọ bụrụ na ọnụọgụgụ gbakọọ gafere otu ụzọ, a na-egbochi ma ọ bụ kaa ozi ahụ dị ka spam. A na-akwado ngwaọrụ maka imelite iwu nzacha ozugbo. Enwere ike iji ngwugwu ahụ na ma ndị ahịa na sistemụ nkesa. Edere koodu SpamAssassin na Perl wee kesaa n'okpuru ikike Apache.

Atụmatụ ntọhapụ ọhụrụ:

• Agbakwunyere OLEVBMacro ngwa mgbakwunye ọhụrụ, emebere iji chọpụta macro OLE na koodu VB n'ime akwụkwọ;
• Ejikwa ntọala body_part_scan_size na
  ntọala rawbody_part_scan_size;
• Nkwado maka ọkọlọtọ "nosubject" agbakwunyere na iwu maka nhazi ahụ nke akwụkwọ ozi ahụ iji kwụsị ịchọ isiokwu isiokwu dịka akụkụ nke ederede n'ime ahụ nke akwụkwọ ozi ahụ;
• Maka ihe nchekwa, emebiela nhọrọ 'sa-update --allowplugins';
• Agbakwunyela mkpụrụokwu “subjprefix” ọhụrụ na ntọala ka ịgbakwunye prefix na isiokwu nke mkpụrụedemede ahụ mgbe ewelitere iwu. Agbakwunyela mkpado "_SUBJPREFIX_" na ndebiri, na-egosipụta uru nke ntọala "subjprefix";
• Agbakwunyela nhọrọ rbl_headers na ngwa mgbakwunye DNSEval iji kọwapụta ndị nkụnye eji isi mee nke a ga-etinye akwụkwọ nlele ahụ na ndepụta RBL;
• Agbakwunyere check_rbl_ns_site na ọrụ iji lelee sava DNS na ndepụta RBL. Agbakwunyere ọrụ check_rbl_rcvd iji lelee ngalaba ma ọ bụ adreesị IP sitere na nkụnye eji isi mee ihe niile enwetara na RBL;
• Agbakwunyela nhọrọ na ọrụ check_hashbl_emails iji chọpụta ndị nkụnye eji isi mee nke a ga-enyocha ọdịnaya ha na RBL ma ọ bụ ACL;
• Agbakwunyere check_hashbl_bodyre ọrụ iji nyochaa ahụ nke ozi-e site na iji okwu oge niile wee lelee egwuregwu ndị achọtara na RBL;
• Agbakwunyere check_hashbl_uris ọrụ iji chọpụta URL n'ime ahụ nke email wee lelee ha na RBL;
• Akwụsịla adịghị ike (CVE-2018-11805) nke na-enye ohere ka e mebie iwu usoro site na faịlụ CF (faịlụ nhazi spamAssassin) na-enweghị igosipụta ozi gbasara ogbugbu ha;
• Adịghị ike (CVE-2019-12420) nke enwere ike iji bute ịgọnarị ọrụ mgbe edozila ozi-e nwere ngalaba Multipart ahaziri ahazi.

Ndị mmepe SpamAssassin kwuputakwara nkwadebe nke alaka 4.0, nke ga-emejuputa nhazi UTF-8 zuru ezu. Na Machị 2020, 1, mbipụta nke iwu nwere mbinye aka dabere na algọridim nke SHA-3.4.2 ga-akwụsịkwa (na ntọhapụ 1, SHA-256 na SHA-512 hash ọrụ dochie SHA-XNUMX).

isi: opennet.ru