Ho lokolloa ha SpamAssassin 3.4.3 Spam Filtering

Kamora selemo sa ntshetsopele fumaneha ho lokolloa ha sethala sa ho sefa spam - Spam Assassin 3.4.3. SpamAssassin e sebelisa mokhoa o kopanetsoeng oa ho etsa qeto ea ho thibela: molaetsa o tlas'a licheke tse ngata (tlhahlobo ea maemo, manane a DNSBL a matšo le a masoeu, lihlopha tse koetlisitsoeng tsa Bayesian, ho hlahloba li-signature, netefatso ea motho ea romelang ho sebelisa SPF le DKIM, joalo-joalo). Ka mor'a ho hlahloba molaetsa ka mekhoa e fapaneng, ho bokelloa boima bo itseng ba boima. Haeba coefficient e baloang e feta moeli o itseng, molaetsa oa thibeloa kapa oa tšoauoa joalo ka spam. Lisebelisoa tsa ho ntlafatsa melao ea ho sefa ka bo eona lia tšehetsoa. Sephutheloana se ka sebelisoa ho litsamaiso tsa bareki le tsa seva. Khoutu ea SpamAssassin e ngotsoe Perl mme e ajoa tlasa laesense ea Apache.

Features tokollo e ncha:

  • E kentse plugin e ncha ea OLEVBCro, e etselitsoeng ho bona li-macros tsa OLE le VB khoutu ka har'a litokomane;
  • Lebelo le ts'ireletso ea ho hlahloba li-imeile tse kholo li ntlafalitsoe ka li-setting body_part_scan_size le
    litlhophiso tsa rawbody_part_scan_size;

  • Tšehetso bakeng sa "nosubject" folakha e ekelitsoe melaong ea ho sebetsana le 'mele oa lengolo ho emisa ho batla sehlooho sa Sehlooho e le karolo ea mongolo' meleng oa lengolo;
  • Ka mabaka a ts'ireletso, khetho ea 'sa-update --allowplugins' e tlositsoe;
  • Lentsoe le lecha la sehlooho "subjprefix" le kenyelelitsoe ho litlhophiso ho kenya sehlohlolong sa sehlooho sa tlhaku ha molao o qala. Letšoao la "_SUBJPREFIX_" le kentsoe litempeleng, le bonts'a boleng ba "subjprefix" setting;
  • Khetho ea rbl_headers e kentsoe ho plugin ea DNSEval ho hlalosa lihlooho tseo cheke e lokelang ho sebelisoa ho tsona mananeng a RBL;
  • E kentse check_rbl_ns_from ho hlahloba seva sa DNS lethathamong la RBL. E kentse ts'ebetso ea check_rbl_rcvd ho hlahloba libaka kapa liaterese tsa IP ho tsoa lihloohong tsohle tse Amoheletsoeng ho RBL;
  • Likhetho li kentsoe tšebetsong ea check_hashbl_emails ho fumana lihlooho tseo litaba tsa tsona li hlokang ho hlahlojoa ho RBL kapa ACL;
  • E kenyellelitse ts'ebetso ea check_hashbl_bodyre ho batla 'mele oa lengolo-tsoibila ho sebelisa polelo e tloaelehileng le ho hlahloba litšoantšiso tse fumanoeng ho RBL;
  • E kentse ts'ebetso ea check_hashbl_uris ho fumana li-URL 'meleng oa lengolo-tsoibila le ho li hlahloba ho RBL;
  • Ho behiloe kotsing (CVE-2018-11805) e lumellang hore litaelo tsa tsamaiso li phethoe ho tsoa ho lifaele tsa CF (lifaele tsa tlhophiso ea SpamAssassin) ntle le ho hlahisa tlhahisoleseding mabapi le ho bolaoa ha bona;
  • Kotsi (CVE-2019-12420) e ka sebelisoang ho baka ho haneloa ha ts'ebeletso ha o sebetsana le lengolo-tsoibila le nang le karolo e ikhethileng ea Multipart e se e lokisitsoe.

Baetsi ba SpamAssassin le bona ba phatlalalitse ho lokisoa ha lekala la 4.0, le tla kenya tšebetsong ts'ebetso e felletseng ea UTF-8. Ka la 2020 Hlakubele 1, phatlalatso ea melao e nang le li-signature tse thehiloeng ho algorithm ea SHA-3.4.2 le eona e tla emisa (ha ho lokolloa 1, SHA-256 e ile ea nkeloa sebaka ke mesebetsi ea SHA-512 le SHA-XNUMX hash).

Source: opennet.ru

Eketsa ka tlhaloso