logo       

[SACVS] CVS: spamassassin/build 2.60_change_summary,1.4,1.5: msg#00088

mail.spam.spamassassin.cvs

Subject: [SACVS] CVS: spamassassin/build 2.60_change_summary,1.4,1.5

Update of /cvsroot/spamassassin/spamassassin/build
In directory sc8-pr-cvs1:/tmp/cvs-serv20272/build

Modified Files:
2.60_change_summary
Log Message:
updated summary


Index: 2.60_change_summary
===================================================================
RCS file: /cvsroot/spamassassin/spamassassin/build/2.60_change_summary,v
retrieving revision 1.4
retrieving revision 1.5
diff -b -w -u -d -r1.4 -r1.5
--- 2.60_change_summary 19 Sep 2003 22:08:43 -0000 1.4
+++ 2.60_change_summary 23 Sep 2003 01:08:46 -0000 1.5
@@ -1,3 +1,13 @@
+SpamAssassin 2.60 is released! SpamAssassin 2.60 is the first major update
+of SpamAssassin since February 2003 (when the 2.50 series was released).
+
+SpamAssassin is a mail filter used to identify spam using advanced text
+analysis. It uses a wide range of statistical and heuristic tests on mail
+to identify "spam", or unsolicited commercial email.
+
+Downloading
+-----------
+
Pick it up from:

http://SpamAssassin.org/released/Mail-SpamAssassin-2.60-rc6.tar.gz
@@ -24,101 +34,112 @@
pub 1024D/265FA05B 2003-06-09 SpamAssassin Signing Key
<release@xxxxxxxxxxxxxxxx>
Key fingerprint =3D 26C9 00A4 6DD4 0CD5 AD24 F6D7 DEE0 1987 265F A05B

+Important installation notes
+----------------------------

-Changes since 2.5x:
+- Bayes FYI: 2.60 has a new Bayes backend and database format. Your old
+ database(s) will automatically be upgraded the first time 2.60 tries to
+ write to the DB, and any journal, if it exists, will be wiped out without
+ being synced.

-- spamd now supports UNIX-domain sockets for low-overhead scanning, thanks
- to Steve Friedl for this. Strongly recommended if you're running spamc
- on the same host as the spamd server
+ In addition, we have had to drop support for Bayes databases in formats
+ other than DB_File, due to a large number of serious issues (including
+ crash and concurrency bugs) with those formats.

-- DNSBLs overhauled; lots of new lists, including SORBS and SpamCop BL;
- dropped Osirusoft due to their retirement, brought on by a DDOS
+ So, what you want to do is something like this:

-- better support for detecting 'invisible text' in HTML messages
+ - stop running spamassassin/spamd (ie: you don't want it to be running
+ during the upgrade)
+ - run "sa-learn --rebuild", this will sync your journal.
+ - upgrade SA to 2.60
+ - install DB_File module if necessary
+ - if you were using another database module, run "sa-learn --import"
+ to migrate the data into new DB_File files
+ - run "sa-learn --rebuild", this will cause the db format to be upgraded
+ - start running spamassassin/spamd again

-- new Bayes tweaks -- tokenization of partial address and URI elements
+ Obviously the steps will be different depending on your environment,
+ but you get the idea. :)

-- RBL timeouts are now handled much more efficiently; if one RBL is taking
- much longer than all the others, it will be cut short and ignored
+- Bayes FYI 2: Because of the new database format, "check_bayes_db" will
+ no longer function properly. The functionality from that script was
+ added to sa-learn via the "--dump" parameter. Please see the sa-learn
+ man/pod documentation for more info.

-- now reduces amount of IP addresses queried, by inferring trust relationships
- between Received headers; trust can be manually specified using
- "trusted_networks"
+- SpamAssassin 2.6x will be the last release supporting perl 5.005,
+ so it's suggested to upgrade to at least perl 5.6.1

-- generalised Received-header parser to more easily detect HELO string
- forgery and faked relay lines
+- Razor2 isn't fully taint safe. So since SpamAssassin 2.60 enables
+ taint mode by default, there's a Razor2.patch file which needs to be
+ applied to Razor2. Documentation exists in the patch file.

-- default report updated to list the hostname of the machine where
- SpamAssassin is running; also asks installer for administrative address
- or URL, to reduce user confusion

-- "add_header": more flexible header rewriting, with a simple template system
+Summary of major changes since 2.5x
+-----------------------------------

-- workaround for red hat kernel with NPTL reporting "application bug" in
- spamd due to use of waitpid() when SIGCHLD is set to SIG_IGN
+spamd improvements

-- dccifd support added
+ - spamd now supports UNIX-domain sockets for low-overhead scanning, thanks
+ to Steve Friedl for this. This is strongly recommended if you're running
+ spamc on the same host as the spamd server

-- Razor 1 support dropped
+Bayes improvements

-- support for domain-based blacklists
+ - new tweaks to the Bayes engine: it now breaks down email addresses and URI
+ elements while learning to use as additional features when testing email

- new bayes backend, including new database format, ability to learn messages
to the journal, etc. Improved expiration mechanism

+HTML parser improvements
+
- HTML::Parser 3.24 or higher is now required

-- taint mode is now enabled by default (for perl versions 5.6.0 and
- higher) for extra security
+ - major improvements to the HTML engine, including better support for
+ detecting 'invisible text' and similar obfuscation techniques used in
+ spam

-- timelog code has been removed
+DNS blacklist and network testing improvements

-- Makefile variables were changed to use DESTDIR instead of the various
- INST_* variables. Please read the PACKAGING file for more information.
+ - DNS blacklists (RBLs) overhauled; lots of new lists, including SORBS and
+ SpamCop; dropped Osirusoft due to their retirement (brought on by a DDOS)

-- lots of bugs fixed and new rules added. ;)
+ - RBL timeouts are now handled much more efficiently; if one RBL is taking
+ much longer than all the others, it will be cut short and ignored

+ - the RBL engine improves the extraction and selection of IP addresses
+ queried by inferring trust relationships between Received headers; trust
+ can also be manually specified using the new "trusted_networks" option

-Bayes FYI: 2.60 has a new Bayes backend and database format. Your old
-database(s) will automatically be upgraded the first time 2.60 tries
-to write to the DB, and any journal, if it exists, will be wiped out
-without being synced.
+ - a generalised Received-header parser to more easily detect HELO string
+ forgery and faked relay lines

-In addition, we have had to drop support for Bayes databases in formats
-other than DB_File, due to a large number of serious issues (including
-crash and concurrency bugs) with those formats.
+ - support for domain-based blacklists and TXT record queries

-So, what you want to do is something like this:
+ - dccifd support added

-- stop running spamassassin/spamd (ie: you don't want it to be running
- during the upgrade)
-- run "sa-learn --rebuild", this will sync your journal.
-- upgrade SA to 2.60
-- install DB_File module if necessary
-- if you were using another database module, run "sa-learn --import"
- to migrate the data into new DB_File files
-- run "sa-learn --rebuild", this will cause the db format to be upgraded
-- start running spamassassin/spamd again
+ - Razor 1 support dropped

-Obviously the steps will be different depending on your environment,
-but you get the idea. :)
+Report improvements

-Bayes FYI 2: Because of the new database format, "check_bayes_db" will
-no longer function properly. The functionality from that script was
-added to sa-learn via the "--dump" parameter. Please see the sa-learn
-man/pod documentation for more info.
+ - to reduce confusion, the default report now includes the hostname of the
+ machine where SpamAssassin is running and the installer also asks for an
+ administrative address or URL

+ - more flexible header and report rewriting including a simple template
+ system

-Other notes:
+Other changes

-- SpamAssassin 2.6x will be the last release supporting perl 5.005,
- so it's suggested to upgrade to at least perl 5.6.1
+ - workaround for red hat kernel with NPTL reporting "application bug" in
+ spamd due to use of waitpid() when SIGCHLD is set to SIG_IGN

-- Razor2 isn't fully taint safe. So since SpamAssassin 2.60 enables
- taint mode by default, there's a Razor2.patch file which needs to be
- applied to Razor2. Documentation exists in the patch file.
+ - taint mode is now enabled by default (for perl versions 5.6.0 and
+ higher) for extra security

-- DB_File is now the only DB/perl library used for Bayes. We found
- there were too many problems with supporting all of the other DB
- libraries out there and standardized on the one that gave us the least
- number of issues.
+ - Makefile variables were changed to use DESTDIR instead of the various
+ INST_* variables. Please read the PACKAGING file for more information.
+
+ - Lots of bugs fixed and new rules added. ;)
+
+ - timelog code has been removed



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf


<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise