You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by jm...@jmason.org on 2004/08/05 05:49:02 UTC
SpamAssassin 2.64 is released!
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
(**IMPORTANT**: This is not an ASF release; this is a maintainance
release of the older 2.6x stable branch, which is NOT released under
an Apache license.)
SpamAssassin is a mail filter which uses advanced statistical
and heuristic tests to identify spam (also known as unsolicited
commercial/bulk email).
Downloading
- -----------
Pick it up from:
http://old.SpamAssassin.org/released/Mail-SpamAssassin-2.64.tar.gz
http://old.SpamAssassin.org/released/Mail-SpamAssassin-2.64.tar.bz2
http://old.SpamAssassin.org/released/Mail-SpamAssassin-2.64.zip
md5sum of archive files:
a82a9dab95462d102e253edb99091fdd Mail-SpamAssassin-2.64.tar.gz
cd482160ddbe371bbf4fb58b715ebbdf Mail-SpamAssassin-2.64.tar.bz2
82a8f47ad87774b5a94805ed9bc6753b Mail-SpamAssassin-2.64.zip
sha1sum of archive files:
7d5776a7c462c849bc48f12a48ed82dc929ac06f Mail-SpamAssassin-2.64.tar.gz
ea4925c6967249a581c4966d1cefd1a3162eb639 Mail-SpamAssassin-2.64.tar.bz2
5922db581c6ef8026455ecce055f14a25b499a3b Mail-SpamAssassin-2.64.zip
Or on CPAN shortly, once the mirrors update.
The release files also have a .asc accompanying them. The file serves
as an external GPG signature for the given release file. The signing
key is available via the wwwkeys.pgp.net keyserver, as well as
http://www.spamassassin.org/released/GPG-SIGNING-KEY
The key information is:
pub 1024D/265FA05B 2003-06-09 SpamAssassin Signing Key <re...@spamassassin.org>
Key fingerprint = 26C9 00A4 6DD4 0CD5 AD24 F6D7 DEE0 1987 265F A05B
Summary of major changes since 2.63
- -----------------------------------
- Security fix prevents a denial of service attack open to certain
malformed messages; this DoS affects all SpamAssassin 2.5x
and 2.6x versions to date.
- Backported several very reliable rules from the SpamAssassin 3.0.0
codebase.
NOTE: If you are testing SpamAssassin 3.0.0, you need to read the README
file before using this distribution!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh CVS
iD8DBQFBEa4uQTcbUG5Y7woRApuuAJ4zF4d0DC4USds8f4GMJD75n3QNkwCfT597
e8nZtAaIBLy/tavhETmmGr0=
=2Dt3
-----END PGP SIGNATURE-----
Re: SpamAssassin 2.64 is released!
Posted by Kelson Vibber <ke...@speed.net>.
At 10:35 AM 8/5/2004, Christopher X. Candreva wrote:
>On Thu, 5 Aug 2004, Cirelle Enterprises wrote:
> > Apparently, SpamCopURI (the SURBL engine) is not compatable with 2.64???
>
>I applied the diffs in the diff-2.63 file to SA 2.64, and am running hapilly
>along now.
Thanks, that seems to work.
Kelson Vibber
SpeedGate Communications <www.speed.net>
Re: SpamAssassin 2.64 is released!
Posted by "Christopher X. Candreva" <ch...@westnet.com>.
On Thu, 5 Aug 2004, Cirelle Enterprises wrote:
> Apparently, SpamCopURI (the SURBL engine) is not compatable with 2.64???
I applied the diffs in the diff-2.63 file to SA 2.64, and am running hapilly
along now.
==========================================================
Chris Candreva -- chris@westnet.com -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/
Re: SpamAssassin 2.64 is released!
Posted by Cirelle Enterprises <gc...@cirelle.com>.
----- Original Message -----
From: "Kelson Vibber" <ke...@speed.net>
To: <sp...@incubator.apache.org>
Sent: Thursday, August 05, 2004 12:27 PM
Subject: Re: SpamAssassin 2.64 is released!
| One problem: SpamCopURI doesn't patch the SA perl modules, it replaces
| them. So any changes in PerMsgStatus.pm or Conf.pm between SA 2.63 and SA
| 2.64 will be lost when you install SpamCopURI.
|
Apparently, SpamCopURI (the SURBL engine) is not compatable with 2.64???
Re: SpamAssassin 2.64 is released!
Posted by Kelson Vibber <ke...@speed.net>.
At 04:04 AM 8/5/2004, Jeff Chan wrote:
>It's probably worth noting the Eric happened to have revised
>SpamCopURI recently also, to version 0.21. Perhaps more
>importantly several people have tried SpamCopURI 0.21 with
>SpamAssassin 2.64 and they seem to work just fine together.
One problem: SpamCopURI doesn't patch the SA perl modules, it replaces
them. So any changes in PerMsgStatus.pm or Conf.pm between SA 2.63 and SA
2.64 will be lost when you install SpamCopURI.
Kelson Vibber
SpeedGate Communications <www.speed.net>
Re: SpamAssassin 2.64 is released!
Posted by Jeff Chan <je...@surbl.org>.
On Wednesday, August 4, 2004, 10:46:34 PM, Daniel Quinlan wrote:
> "jdow" <jd...@earthlink.net> writes:
>> Did this port the SURBL into the release or not?
> Adding SURBL to 2.64 wasn't really an option we could consider. A few
> reasons off of the top of my head:
> - the 2.6x tree is our stable tree and that would be a major change
> - the main purpose of 2.64 is fixing a specific security issue, adding
> SURBL would have delayed the release and added unnecessary risk
[...]
It's probably worth noting the Eric happened to have revised
SpamCopURI recently also, to version 0.21. Perhaps more
importantly several people have tried SpamCopURI 0.21 with
SpamAssassin 2.64 and they seem to work just fine together.
> OVERALL% SPAM% HAM% S/O RANK SCORE NAME
> 151033 122586 28447 0.812 0.00 0.00 (all messages)
> 100.000 81.1650 18.8350 0.812 0.00 0.00 (all messages as %)
> 23.882 29.4218 0.0105 1.000 0.98 0.00 RCVD_IN_XBL
> 17.441 21.4837 0.0176 0.999 0.97 0.00 URIBL_SC_SURBL
> 53.206 65.5156 0.1582 0.998 0.90 0.00 URIBL_OB_SURBL
> 9.897 12.1449 0.2074 0.983 0.82 0.00 URIBL_AB_SURBL
> 58.068 71.4494 0.4043 0.994 0.79 0.00 URIBL_WS_SURBL
> 0.017 0.0204 0.0000 1.000 0.48 0.00 URIBL_PH_SURBL
Thanks for the additional stats. I'll assume the spam detection
rates for AB and SC are probably low because Daniel's spam corpus
covers a much longer historical time period than would typically
be encountered with messages in real time. Other rule stats
seems to suggest SC, WS, and OB have fairly similar spam
detection rates, such as these from Raymond Dijkxhoorn:
SpamAssassin tag hits: (top 100)
#1 64675 BAYES_99
#2 54198 HTML_MESSAGE
#3 44694 RCVD_IN_SBL+XBL
#4 43427 RCVD_IN_BL_SPAMCOP_NET
#5 37191 RCVD_IN_SORBS
#6 35888 WS_URI_RBL
#7 33729 SPAMCOP_URI_RBL
#8 33089 MIME_HTML_ONLY
#9 32485 OUTBLAZE_URI_RBL
#10 26678 RCVD_IN_DSBL
#11 19665 RCVD_IN_AHBL
#12 19662 RCVD_IN_DYNABLOCK
#13 19146 CLICK_BELOW
#14 18374 ABUSEBUTLER_URI_RBL
Cheers,
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
Re: SpamAssassin 2.64 is released!
Posted by Daniel Quinlan <qu...@pathname.com>.
"jdow" <jd...@earthlink.net> writes:
> Did this port the SURBL into the release or not?
Well, it's not listed in the announcement for a reason. :-)
Adding SURBL to 2.64 wasn't really an option we could consider. A few
reasons off of the top of my head:
- the 2.6x tree is our stable tree and that would be a major change
- the main purpose of 2.64 is fixing a specific security issue, adding
SURBL would have delayed the release and added unnecessary risk
- we don't have a old-style contributor agreement from Eric Kolve to
include the code
- 2.64 is going to be rather short-lived as the recommended stable
version, 3.0.0 is very close to release
- SURBL has a very large effect on scores, so it would have had a
negative impact on false positives
We did add a number of highly effective rules that have virtually no
false positives and fixed the most significant false positive problem
with 2.63 (the new SORBS and NJABL additions that cause the top-level
RCVD_IN_SORBS and RCVD_IN_NJABL rules to fire too often on ham).
Most of the rules are simple header rules, but we did add one new
network test which adds zero additional cost: XBL. I know it's not as
exciting as SURBL, but it works *very* well and we could add it with
minimal risk.
OVERALL% SPAM% HAM% S/O RANK SCORE NAME
151033 122586 28447 0.812 0.00 0.00 (all messages)
100.000 81.1650 18.8350 0.812 0.00 0.00 (all messages as %)
23.882 29.4218 0.0105 1.000 0.98 0.00 RCVD_IN_XBL
17.441 21.4837 0.0176 0.999 0.97 0.00 URIBL_SC_SURBL
53.206 65.5156 0.1582 0.998 0.90 0.00 URIBL_OB_SURBL
9.897 12.1449 0.2074 0.983 0.82 0.00 URIBL_AB_SURBL
58.068 71.4494 0.4043 0.994 0.79 0.00 URIBL_WS_SURBL
0.017 0.0204 0.0000 1.000 0.48 0.00 URIBL_PH_SURBL
Daniel
--
Daniel Quinlan
http://www.pathname.com/~quinlan/
Re: SpamAssassin 2.64 is released!
Posted by jdow <jd...@earthlink.net>.
Did this port the SURBL into the release or not?
{^_^}
----- Original Message -----
From: <jm...@jmason.org>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> (**IMPORTANT**: This is not an ASF release; this is a maintainance
> release of the older 2.6x stable branch, which is NOT released under
> an Apache license.)
>
> SpamAssassin is a mail filter which uses advanced statistical
> and heuristic tests to identify spam (also known as unsolicited
> commercial/bulk email).
>
> Downloading
> - -----------
>
> Pick it up from:
>
> http://old.SpamAssassin.org/released/Mail-SpamAssassin-2.64.tar.gz
> http://old.SpamAssassin.org/released/Mail-SpamAssassin-2.64.tar.bz2
> http://old.SpamAssassin.org/released/Mail-SpamAssassin-2.64.zip
Re: SpamAssassin 2.64 is released!
Posted by Tim Litwiller <ti...@litwiller.net>.
Steven Stern wrote:
>On Fri, 6 Aug 2004 17:52:42 -0400, Theo Van Dinter <fe...@kluge.net> wrote:
>
>
>
>>On Fri, Aug 06, 2004 at 04:44:38PM -0500, Tim Litwiller wrote:
>>
>>
>>>>I'm running 2.63 install from rpm on e-smith server a derivative of
>>>>redhat 7.3 is there any chance that 2.64 rpms are on the way - or
>>>>would it be better to wait till 3.0 release to upgrade.
>>>>
>>>>
>>hrm. the 2.64 ones haven't rsynced over apparently. <sigh>
>>
>>/me fixes
>>
>>ok, the 2.64 and 3.0.0-pre4 srpms will be over at
>>http://old.spamassassin.org/released/RPMs/ shortly.
>>
>>
>
>It's now in Dag's repository.
>--
> Steve
>
>
>
>
Thanks for that!
Re: SpamAssassin 2.64 is released!
Posted by Steven Stern <su...@sterndata.com>.
On Fri, 6 Aug 2004 17:52:42 -0400, Theo Van Dinter <fe...@kluge.net> wrote:
>On Fri, Aug 06, 2004 at 04:44:38PM -0500, Tim Litwiller wrote:
>> >I'm running 2.63 install from rpm on e-smith server a derivative of
>> >redhat 7.3 is there any chance that 2.64 rpms are on the way - or
>> >would it be better to wait till 3.0 release to upgrade.
>
>hrm. the 2.64 ones haven't rsynced over apparently. <sigh>
>
>/me fixes
>
>ok, the 2.64 and 3.0.0-pre4 srpms will be over at
>http://old.spamassassin.org/released/RPMs/ shortly.
It's now in Dag's repository.
--
Steve
Re: SpamAssassin 2.64 is released!
Posted by Theo Van Dinter <fe...@kluge.net>.
On Fri, Aug 06, 2004 at 04:44:38PM -0500, Tim Litwiller wrote:
> >I'm running 2.63 install from rpm on e-smith server a derivative of
> >redhat 7.3 is there any chance that 2.64 rpms are on the way - or
> >would it be better to wait till 3.0 release to upgrade.
hrm. the 2.64 ones haven't rsynced over apparently. <sigh>
/me fixes
ok, the 2.64 and 3.0.0-pre4 srpms will be over at
http://old.spamassassin.org/released/RPMs/ shortly.
--
Randomly Generated Tagline:
Perl itself is usually pretty good about telling you what you shouldn't
do. :-)
-- Larry Wall in <11...@jpl-devvax.JPL.NASA.GOV>
Re: SpamAssassin 2.64 is released!
Posted by Tim Litwiller <ti...@litwiller.net>.
> I'm running 2.63 install from rpm on e-smith server a derivative of
> redhat 7.3 is there any chance that 2.64 rpms are on the way - or
> would it be better to wait till 3.0 release to upgrade.
>
>
>
> jm@jmason.org wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>>
>> (**IMPORTANT**: This is not an ASF release; this is a maintainance
>> release of the older 2.6x stable branch, which is NOT released under
>> an Apache license.)
>>
>> SpamAssassin is a mail filter which uses advanced statistical
>> and heuristic tests to identify spam (also known as unsolicited
>> commercial/bulk email).
>>
>> Downloading
>> - -----------
>>
>> Pick it up from:
>>
>> http://old.SpamAssassin.org/released/Mail-SpamAssassin-2.64.tar.gz
>> http://old.SpamAssassin.org/released/Mail-SpamAssassin-2.64.tar.bz2
>> http://old.SpamAssassin.org/released/Mail-SpamAssassin-2.64.zip
>>
>> md5sum of archive files:
>> a82a9dab95462d102e253edb99091fdd Mail-SpamAssassin-2.64.tar.gz
>> cd482160ddbe371bbf4fb58b715ebbdf Mail-SpamAssassin-2.64.tar.bz2
>> 82a8f47ad87774b5a94805ed9bc6753b Mail-SpamAssassin-2.64.zip
>> sha1sum of archive files:
>> 7d5776a7c462c849bc48f12a48ed82dc929ac06f Mail-SpamAssassin-2.64.tar.gz
>> ea4925c6967249a581c4966d1cefd1a3162eb639 Mail-SpamAssassin-2.64.tar.bz2
>> 5922db581c6ef8026455ecce055f14a25b499a3b Mail-SpamAssassin-2.64.zip
>>
>> Or on CPAN shortly, once the mirrors update.
>>
>> The release files also have a .asc accompanying them. The file serves
>> as an external GPG signature for the given release file. The signing
>> key is available via the wwwkeys.pgp.net keyserver, as well as
>> http://www.spamassassin.org/released/GPG-SIGNING-KEY
>>
>> The key information is:
>>
>> pub 1024D/265FA05B 2003-06-09 SpamAssassin Signing Key
>> <re...@spamassassin.org>
>> Key fingerprint = 26C9 00A4 6DD4 0CD5 AD24 F6D7 DEE0 1987 265F A05B
>>
>> Summary of major changes since 2.63
>> - -----------------------------------
>>
>> - Security fix prevents a denial of service attack open to certain
>> malformed messages; this DoS affects all SpamAssassin 2.5x
>> and 2.6x versions to date.
>> - Backported several very reliable rules from the SpamAssassin 3.0.0
>> codebase.
>>
>> NOTE: If you are testing SpamAssassin 3.0.0, you need to read the README
>> file before using this distribution!
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.2.4 (GNU/Linux)
>> Comment: Exmh CVS
>>
>> iD8DBQFBEa4uQTcbUG5Y7woRApuuAJ4zF4d0DC4USds8f4GMJD75n3QNkwCfT597
>> e8nZtAaIBLy/tavhETmmGr0=
>> =2Dt3
>> -----END PGP SIGNATURE-----
>>
>>
>>
>
>