Thanks a lot Kris.

I just got the latest rules. 
I'm okay with poor performance for some of the rules as there isn't much
load on the related system. 
And yes, you're right, on Ubuntu 20.04.06 the rules are installed in
/usr/share/spamassassin. 
sa-update has placed the updated rules in /var/lib/spamassassin. I kept
usr/share/spamassassin for the moment as if I got it right, /var/lib will
have priority over /usr/share.
Seems to work so far, however I will check the logs in a couple of days to
validate it's actually running smoothly. 

Mark



-----Ursprüngliche Nachricht-----
Von: Kris Deugau [mailto:kdeu...@vianet.ca] 
Gesendet: Donnerstag, 6. Juni 2024 19:48
An: users@spamassassin.apache.org
Betreff: Re: RCVD_IN_RP_CERTIFIED always -3

hostmas...@audiogen.ch wrote:
> I found the related 
> configuration in 20_dnsbl_tests.cf:
> 
> /# 
>
---------------------------------------------------------------------------/
> 
> /# Return Path Certified:/
> 
> /# https://www.returnpath.net/internetserviceprovider/certification//
> 
> /# (replaces RCVD_IN_BSP_TRUSTED, RCVD_IN_BSP_OTHER, 
> RCVD_IN_SSC_TRUSTED_COI)/
> 
> /header RCVD_IN_RP_CERTIFIED     eval:check_rbl_txt('ssc-firsttrusted', 
> 'sa-trusted.bondedsender.org.')/
> 
> /describe RCVD_IN_RP_CERTIFIED   Sender in ReturnPath Certified - 
> Contact cert...@returnpath.net/
> 
> /tflags RCVD_IN_RP_CERTIFIED     net nice/
> 
> /reuse RCVD_IN_RP_CERTIFIED/

These were renamed/rebranded some time ago.  Run sa-update to get 
current rules.

Note that the live rules your system references should be under 
/var/lib/spamassassin on most systems.  Some distribution packages will 
also ship a rules snapshot in /usr/share/spamassassin, however these 
should be considered more or less unusable unless you are trying to run 
SA in a very extremely security-restricted environment.

> Regarding the SpamAssassin 4.x rules - are they backward compatible to
3.4.4?

Pretty much, although rules that rely on new features won't work well or 
at all, and some rules will have poor performance as some of the code 
that extracts data they reference has been updated and refined.

-kgd


Reply via email to