SARE rules question
Matt Kettler
mkettler at evi-inc.com
Tue Aug 28 18:26:26 IST 2007
Diane Rolland wrote:
> I have tried to install/configure SARE Rules and RulesDeJour from
> http://www.rulesemporium.com/rules.htm and when I run the below command
> I get the following failures.
>
> /usr/bin/spamassassin -p /etc/MailScanner/spam.assassin.prefs.conf --lint
>
> Failed to parse line in SpamAssassin configuration, skipping:
> lock_method flock
> Failed to parse line in SpamAssassin configuration, skipping:
> use_auto_whitelist 0
> Failed to parse line in SpamAssassin configuration, skipping:
> envelope_sender_header X-MailScanner-From
>
> By commenting them out of the spam.assassin.prefs.conf file for the
> above items I get the --lint to run without error, but I'm not sure what
> that means to my configuration.
>
> I have SA 2.55, MailScanner-4.50.15-1 (I know, out of date)
not just out of date.. ancient. SA 2.55 is from may of 2003.
2.55 is also subject to a remotely exploitable DoS attack by sending it a
malformed email.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0796
Before messing with SARE and RDJ, I'd seriously look at upgrading.
In any event your version is way too old to support those options.
The flock is really just a performance tweak, you won't miss it. This allows SA
to use a faster lock method for your bayes database, at the expense of not being
NFS compatible.
The envelope_sender_header, well, there's no equivalent functionality in your
version, but this allows SA to look at nonstandard headers when trying to detect
the envelope sender. This really would only affect your whitelist_from* and
blacklist_from* efforts.
use_auto_whitelist allows you to disable the AWL, but in your version, it
defaults to off anyway unless you pass a command-line parameter. (in 2.60 they
changed it to default-on and added a config option. In 3.1.0 it became a plugin,
so nowdays you can just disable it by not loading it.)
More information about the MailScanner
mailing list