rspamd es a utility which provides tools to evaluate messages according to various criteria, including rules, statistical methods and blacklists, on the basis of which the total weight of the message is formed, which is used to make a decision on the need for blocking.
rspamd supports almost all the functions implemented in SpamAssassin and it has a number of features that allow it to filter email on average 10 times faster than SpamAssassin, as well as provide better quality filtering. System code It is written in C and released under the Apache 2.0 license.
This excellent utility was created using an event-based architecturesy was originally designed for use on highly loaded systems, allowing it to process hundreds of messages per second.
The rules for detecting signs of spam are very flexible and in their simplest form they can contain regular expressions, and in more complex situations they can be written in the Lua language.
Expanding functionality and adding new types of controls is implemented through modules that can be created in C and Lua. For example, modules are available to verify the sender using SPF, confirm the sender's domain through DKIM, and generate queries against DNSBL lists. To simplify configuration, create rules, and track statistics, an administrative web interface is provided.
Rspamd 2.0 main news
Some days ago the new version of Rspamd 2.0 was released in which one of its most outstanding news is that instead of Libevent, the libev library is used for the event processing loop, which is free from some of the limitations of libevent and allows for higher performance.
Using libev made it possible to simplify the code, improve signal processing and timeout, and unify file change tracking using the inotify mechanism (not all released libevent versions for supported platforms might work with inotify).
Another novelty announced is that a transition to a new problem numbering scheme has been completed. Since the first number, in the version number, has not changed for several years and the second number acts as a real indicator of the version, it was decided to switch to the "yz" format instead of the "xyz" scheme.
The RBL module replaced the SURBL and Emails modules, which made it possible to unify the processing of all the checks on the black list. RBL capabilities are enhanced by supporting additional types, such as selectors and by simplifying the extension of existing rules. Rules to block email based on map lists instead of RBL DNS are no longer supported; instead, it is recommended to use multimaps with selectors.
Moreover discontinued support for the message classification module is also highlighted using the Torch deep learning engine library. The reason is called the excessive complexity of the torch and the high complexity of maintenance in the current state.
As a substitute for classification using machine learning methods, a completely rewritten neural module is proposed, in which the kann library is used to ensure the functioning of the neural network, which includes only 4000 lines of C code. The new implementation solved many problems with the appearance of dead spots during training.
How to install Rspamd 2.0 on Ubuntu and derivatives?
Rspamd is a utility that is mainly focused for its use on servers, although also for those who are interested in being able to install it on their system, they must follow the instructions that we share below.
To do this we are going to open a terminal in our system (you can use the shortcut keys Ctrl + Alt + T) and in it we are going to type the following:
sudo apt-get install -y lsb-release wget # optional CODENAME=`lsb_release -c -s`
wget -O- https://rspamd.com/apt-stable/gpg.key | apt-key add -
sudo echo "deb [arch=amd64] http://rspamd.com/apt-stable/ $CODENAME main" > /etc/apt/sources.list.d/rspamd.list
sudo echo "deb-src [arch=amd64] http://rspamd.com/apt-stable/ $CODENAME main" >> /etc/apt/sources.list.d/rspamd.list
sudo apt-get update sudo apt-get --no-install-recommends install rspamd
And that's it, you can start using this utility, if you want to know a little more about its use and configuration you can consult the following link.