Kutulutsidwa kwamasefa a spam SpamAssassin 3.4.3

Pambuyo pa chaka cha chitukuko zilipo kutulutsidwa kwa nsanja yosefera sipamu - Spam Assassin 3.4.3. SpamAssassin imagwiritsa ntchito njira yophatikizira yosankha kuletsa: uthengawo umayesedwa ndi macheke angapo (kusanthula zochitika, mindandanda yakuda ndi yoyera ya DNSBL, ophunzitsidwa bwino a Bayesian classifiers, kuwunika siginecha, kutsimikizika kwa wotumiza pogwiritsa ntchito SPF ndi DKIM, ndi zina). Pambuyo powunika uthengawo pogwiritsa ntchito njira zosiyanasiyana, choyezera china cholemera chimasonkhanitsidwa. Ngati coefficient yowerengeredwa ipitilira malire ena, uthengawo umatsekedwa kapena kulembedwa ngati sipamu. Zida zosinthira zokha malamulo osefera zimathandizidwa. Phukusili lingagwiritsidwe ntchito pamakasitomala ndi makina a seva. Khodi ya SpamAssassin idalembedwa ku Perl ndikugawidwa pansi pa layisensi ya Apache.

Features kutulutsa kwatsopano:

• Anawonjezera pulogalamu yowonjezera OLEVBCro, yopangidwa kuti izindikire OLE macros ndi VB code mkati mwa zikalata;
• Kuthamanga ndi chitetezo cha kusanthula maimelo akuluakulu kwasinthidwa ndi zoikamo body_part_scan_size ndi
  rawbody_part_scan_size zokonda;

• Thandizo la mbendera ya "nosubject" yawonjezeredwa ku malamulo oyendetsera thupi la kalatayo kuti asiye kufufuza mutu wa Mutu monga gawo la malemba mu thupi la kalatayo;
• Pazifukwa zachitetezo, njira ya 'sa-update --allowplugins' yachotsedwa;
• Liwu latsopano loti "subjprefix" lawonjezeredwa pazosintha kuti muwonjezere mawu oyambira pamutu wa chilembocho pomwe lamulo lidayambitsidwa. "_SUBJPREFIX_" tag yawonjezedwa ku ma templates, kuwonetsa mtengo wa "subjprefix";
• Njira ya rbl_headers yawonjezedwa ku pulogalamu yowonjezera ya DNSEval kuti ifotokoze mitu yomwe cheke iyenera kugwiritsidwa ntchito m'ndandanda wa RBL;
• Wonjezerani check_rbl_ns_from kuti muwone seva ya DNS pamndandanda wa RBL. Anawonjezera ntchito ya check_rbl_rcvd kuti muwone madambwe kapena ma adilesi a IP kuchokera pamitu yonse Yolandilidwa mu RBL;
• Zosankha zawonjezeredwa ku ntchito ya check_hashbl_emails kuti mudziwe mitu yomwe zomwe zili mkati mwake ziyenera kufufuzidwa mu RBL kapena ACL;
• Wowonjezera check_hashbl_bodyre ntchito yofufuza thupi la imelo pogwiritsa ntchito mawu okhazikika ndikuwona zomwe zapezeka mu RBL;
• Wowonjezera check_hashbl_uris ntchito kuti azindikire ma URL mu thupi la imelo ndikuwayang'ana mu RBL;
• Chiwopsezo (CVE-2018-11805) chakhazikitsidwa chomwe chimalola kuti malamulo adongosolo atsatidwe kuchokera ku mafayilo a CF (mafayilo osintha a SpamAssassin) osawonetsa zambiri za kuphedwa kwawo;
• Chiwopsezo (CVE-2019-12420) chomwe chingagwiritsidwe ntchito kuletsa ntchito mukakonza imelo yokhala ndi gawo lopangidwa mwapadera la Multipart chakhazikitsidwa.

Madivelopa a SpamAssassin adalengezanso za kukonzekera kwa nthambi ya 4.0, yomwe idzagwiritse ntchito pokonza UTF-8. Pa Marichi 2020, 1, kusindikizidwa kwa malamulo okhala ndi siginecha yotengera SHA-3.4.2 aligorivimu kudzathanso (potulutsidwa 1, SHA-256 idasinthidwa ndi SHA-512 ndi SHA-XNUMX hashi ntchito).

Source: opennet.ru