Rspamd 4.3.0 is available for the open-source spam filtering platform, bringing stability fixes, stricter HTTP connection checks, and enhanced email authentication.
The release separates link discrepancy evaluation for phishing detection, introduces trust maps for link rewriting, enforces stricter DKIM rules rejecting RSA keys under 1024 bits, and updates HTML parsing.
Existing custom filtering rules may require adjustments.
The software developers fixed issues that could cause processes to crash or connections to drop. These issues included incorrect HTTP headers and empty receive values.
The update also enhances the handling of HTTP connections, taking into account security settings and destination addresses, which extends protection against requests to local networks.
Phishing messages are now detected by separately evaluating differences in links. At the same time, trust maps are being introduced for services that are allowed to change links.
↳
READ ALSO
HACKS.GR / RELATED
Software & Open Source
The Blanc browser changes base and switches to Chromium code
↗
There are also significant changes in sender identity verification. Checks are made with stricter criteria, rejecting duplicate labels, invalid key types and smaller keys, while addresses are checked for any invalid characters.
File scanning now addresses alternative names and obfuscation techniques, preventing dangerous files from being hidden.
In email, improvements to analysis prevent suspicious content from being hidden using appearance rules or excessive elements. A new rule also detects tiny external tracking images in messages.
System administrators should be aware that these changes may affect existing settings, requiring adjustments to custom rules.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)