Current Version: 0.30
Development Version: 1.0-pre9

• CVS Access
  • A nightly build is available on the downloads page, otherwise:
  • cvs -d :pserver:anonymous::@theasylum.org:/var/lib/cvs login
  • cvs -d :pserver:anonymous::@theasylum.org:/var/lib/cvs co spasm

• News:
  • -pre2 and -pre3 have bugs that prevent quarantined messages from properly being saved! Anyone using -pre2 or -pre3 needs to upgrade to the latest release immediately!
  • A mailing list has been created
  • IMPORTANT: Osirusoft is gone. Please discontinue use of the Osirusoft filter immediately. Systems with multiple users may want to comment out the SF_OSIRUSOFT check in spasmd.c

• Notes:
  • A bug was found in sendmail's libmilter handling. It's fixed in 8.12.11, and a patch is included in the 1.x series of spasm.

• Documentation - Now updated for v1.0:
  • README
  • INSTALL
  • README.UPGRADE
  • README.SENDMAIL.BUG
  • README.CGI
  • README.vscan
  • spasm
  • spasmdb
  • spasmd

• Download:
  • spasm-1.0-pre9.tgz

• Current Changes:
  • Fixed segfault when VirusScanner is active but no VirusScannerArgs are given
  • Fixed DomainLoggingExceptions handler
  • Touch pidfile as root so we can put it in /var/run
  • Fixed spasm.init
  • Most spasm.h options now in runtime config file
  • All suid $SPASM_USER CGI helper apps rolled into one
  • Removed usage() from spasmd.c
  • Added thread id to syslog messages in spasmd.c
  • Added instructions on obtaining and building vscan from TrendMicro in README.vscan
  • Added update_vscan_pattern.pl in contrib
  • INSTALL file has been rewritten
  • Created README.CGI and removed README from contrib
  • Reinstalled SIGSEGV handler
  • Installed SIGQUIT handler to shutdown cleanly
  • Modified spasm.init script to send SIGQUIT to shutdown
  • Man pages updated
  • Activated VerifyUsersSpasm option
  • Added VerifyUsersCustom option
  • Updated autoconf configuration
  • Updated html documentation (how to add comments to whitelist and blacklist entries)

• To Do:
  • test portability (any volunteers?)
  • real documentation (we're getting closer!)
  • full documentation of logic
  • reinvestigate mysql support and db-independence
  • support other AV scanners
  • support other content-based filters
  • investigate other miscellaneous filters
  • change log file separator from colon to comma?
  • ready-to-run virtual/multiple domain support:
    • genericise custom domaintools.cgi and usertools.cgi
    • PAM/virtdomain auth to spasm(1)
    • built-in vd auth with DB key/val pairs: domain:auth_username