[IMC-Sysadmin] Re: [Listwork] proposal: SpamAssassin 2.64 upgrade this weekend

[mtoups at indymedia.org]

this has been done.  everything appears to be running smoothly again.

new SA rules include:

score RCVD_IN_XBL 0 2.333 0 4.923
(this is the exploit block list)

score X_MESSAGE_INFO 3.600 4.077 7.503 2.253
score MIME_BOUND_DD_DIGITS 3.600 4.230 8.610 2.784
score RCVD_DOUBLE_IP_SPAM 3.520 3.906 6.781 1.863
score MSGID_SPAM_CAPS 3.520 3.069 6.845 1.916
score RATWARE_RCVD_AT 2.560 1.116 1.628 1.014
score SUBJECT_DRUG_GAP_X 2.552 2.120 0.647 0.543
score SUBJECT_DRUG_GAP_S 1.863 1.180 3.770 0.764
score SUBJECT_DRUG_GAP_VA 1.468 1.548 0.780 0.321
(since this is only a minor spamassassin release,
these are considered "very reliable" rules backported
from 3.0)

-matt

On Fri, 13 Aug 2004 mtoups at indymedia.org wrote:

>
> Hi listworkers & sysadmins --
>
> Spamassassin has released an upgrade to SA 2.63, which we are
> using on sarai.  it is a minor release which fixes an important
> security problem.  given that situation, I propose we upgrade
> to 2.64 immediately this weekend.  If there are no objections I
> will go ahead and do this saturday or sunday when load is low
> and i can take postfix down for a minute to perform the upgrade.
>
> Spamassassin 3.0 will also be out any day now -- that upgrade
> might be a bit more involved, but I think it will pay off bigtime.
> SURBL alone has me excited.
> ( exciting stats are still available here:
> http://sarai.indymedia.org/~mtoups/spamstats.html )
>
> -matt toups
>
> gpg --keyserver keys.indymedia.org --recv-keys CE9CE8AD
>
>
> Summary of major changes since 2.63
> -----------------------------------
>
> - Security fix prevents a denial of service attack open to certain
>   malformed messages; this DoS affects all SpamAssassin 2.5x
>   and 2.6x versions to date.
> - Backported several very reliable rules from the SpamAssassin 3.0.0
>   codebase.
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.indymedia.org/pipermail/imc-sysadmin/attachments/20040815/8283a927/attachment.pgp