From 7a9c774081e180bb04d4281f81d0710373fd1079 Mon Sep 17 00:00:00 2001 From: Vsevolod Stakhov Date: Mon, 16 Dec 2024 19:09:30 +0000 Subject: [PATCH] Update 2024-12-16-rspamd-3.11.0.md --- _posts/2024-12-16-rspamd-3.11.0.md | 26 +++++++++++--------------- 1 file changed, 11 insertions(+), 15 deletions(-) diff --git a/_posts/2024-12-16-rspamd-3.11.0.md b/_posts/2024-12-16-rspamd-3.11.0.md index 42421ab0a..b7ba26b4a 100644 --- a/_posts/2024-12-16-rspamd-3.11.0.md +++ b/_posts/2024-12-16-rspamd-3.11.0.md @@ -22,7 +22,7 @@ Users upgrading from previous versions should review their Elasticsearch configu ## Enhanced Security and Performance Features ### New Ratelimiting Capabilities -The release introduces sophisticated ratelimiting mechanisms: +The release introduces helper tools to manage ratelimits: - LRU cache implementation for tracking recent ratelimit buckets - New management utilities for better control over ratelimits - Improved monitoring and administration tools via `rspamadm` @@ -34,15 +34,15 @@ The release introduces sophisticated ratelimiting mechanisms: - Enhanced UTF-8 processing capabilities ### Message Processing Enhancements -- New header processing controls with include/exclude logic -- Improved upstream selection with smarter address rotation -- New message anonymization tools for privacy-conscious deployments + +- New message anonymization tools for privacy-conscious deployments `rspamadm mime anonymize` - Addition of `rspamadm mime strip` for secure attachment handling ## Critical Fixes and Security Updates Several important security and functionality fixes have been implemented: +- Improved upstream selection with smarter address rotation - Comprehensive fixes for RFC 2047 header encoding - Enhanced fuzzy storage security with improved dynamic key handling - Optimized TCP connection handling with cumulative timeouts @@ -61,30 +61,26 @@ The web interface received significant usability updates: ## Configuration and Administration New configuration capabilities have been added: -- Introduction of `lua.local.d` folder for better organization -- Extended configuration options for greater flexibility +- Introduction of `lua.local.d` folder to allow user's plugins to be placed there +- Extended configuration options for user based plugins and rules in `conf.local.d/*.conf` - Improved documentation and examples ## Performance Optimizations Several performance-focused improvements have been implemented: -- Optimized RBL checking logic -- Refined multimap text part processing +- Optimized RBL checking logic (e.g. `received` checks exclude `from` IP) +- Refined multimap text part processing: so no more double scoring for multipart/alternative hits - Enhanced GPT module response parsing - Improved memory management and resource utilization ## Installation and Upgrade Notes Users upgrading to version 3.11 should: -1. Review Elasticsearch/OpenSearch configurations if using these features -2. Test existing configurations with the new header processing logic -3. Update any custom scripts that interact with ratelimiting features -4. Review the new configuration options for potential optimizations +1. Review Elasticsearch/OpenSearch configurations if using these features (please bear in mind, that by default this module is **disabled** now, so you will need to enable it explicitly after review of the configuration, e.g. by specifying `enabled = true`). +2. Review the new scores for multimap plugin if your score relied on double hits for `multipart/alternative` and `content` multimap type The Rspamd team recommends testing the upgrade in a staging environment first, particularly if using the Elasticsearch integration. ## Looking Forward -This release represents a significant step forward in Rspamd's evolution, with particular focus on modern infrastructure support, security, and usability. The improvements to the Elasticsearch integration and the addition of new management tools provide a solid foundation for future enhancements. - -For detailed technical information and full changelog, please visit the [Rspamd documentation](https://rspamd.com/doc/) website. +For detailed technical information and [full changelog](https://github.com/rspamd/rspamd/compare/3.10.2...3.11.0), please visit the [Rspamd documentation](https://rspamd.com/doc/) website.