https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8119
AXB <axb.li...@gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |INVALID
Status|NEW |RESOLVED
--- Comment #4 from AXB <axb.li...@gmail.com> ---
RTFM:
SA-Update Channels
A sa-update channel is a remote source where sa-update will get the new
configuration files. If your company’s server security policy doesn’t allow
this, you should disable the SpamAssassin cron job and either run a private
channel or manually review the channel data and apply it to your server.
The option --channel can specify which channel to download new rules from. The
default channel for many installations is updates.spamassassin.org. If you run
lots of SpamAssassin servers and want an easy way to update rules for all of
them, you can run a channel and easily distribute the changes among your
servers.
The way sa-update and channels interact is a bit strange and relies partially
on DNS queries. A channel can either serve the configuration files themselves
or point to a list of mirrors that would have the configuration files.
First, a TXT DNS request is made to the channel with the major, minor, and
patch version numbers in reverse order as subdomains. The response is the
latest version number of the configuration files.
$ dig +short txt 2.4.3.updates.spamassassin.org
"1884121"
You can verify your version by looking for the line # UPDATE version <version>
in the file representing the channel URL e.g. updates_spamassassin_org.cf
inside of /var/lib/spamassassin/<MAJOR>.<MINOR><PATCH>. This is done
automatically by sa-update though, so don’t worry about it.
Now the list of mirrors has to be resolved with another TXT DNS query. The DNS
response will be a URL to a MIRRORED.BY file. The file lists one mirror per
line in the format of http(s)://<mirror> weight=<weight>. These mirrors are
used to download the new configuration files.
$ dig +short txt mirrors.updates.spamassassin.org
"http://spamassassin.apache.org/updates/MIRRORED.BY";
The program now tries a mirror to download the new configuration files. If a
mirror fails sa-update will move onto the next one. The files that are
downloaded are <version>.tar.gz, <version>.tar.gz.sha512,
<version>.tar.gz.sha256, and <version>.tar.gz.asc.
Once the archive and checksum are verified, the archive is extracted into a
directory representing the channel e.g. updates_spamassassin_org in the
directory /var/lib/spamassassin/<MAJOR>.<MINOR><PATCH>.
These new files aren’t yet used until you restart SpamAssassin. The cron job on
the other hand will automatically restart the service.
--
You are receiving this mail because:
You are the assignee for the bug.
