Updating / Patching?

General eFa discussion
Post Reply
User avatar
DavidRa
Posts: 30
Joined: 24 Dec 2012 08:29
Location: Sydney, AU
Contact:

Updating / Patching?

Post by DavidRa »

Is there any need to update packages or the kernel in the EFA appliance? How do we do it?

Background: I've noticed that there's a higher volume of spam getting through the appliance to my server. Plus, there are always bugs and fixes for various bits and pieces (OK less for pieces like Postfix than perhaps something newer like Baruwa). But the base system rules need to get updated with new rules, there are changes to geo-IP and dynamic/static pools for ISPs, and so forth.

So ... suggestions on the "process" would be welcome. Commands, tools, etc?
User avatar
darky83
Site Admin
Posts: 540
Joined: 30 Sep 2012 11:03
Location: eFa
Contact:

Re: Updating / Patching?

Post by darky83 »

Thats a point I'm still thinking about.

It would be best if all servers are always up2date by a automatic script.
So my idea is to split the EFA-Update script in 2 parts.

1 part that checks for a EFA update version
the other part that updates all the essential spam filtering items (rules etc) and run this part daily.
Version eFa 4.x now available!
User avatar
DavidRa
Posts: 30
Joined: 24 Dec 2012 08:29
Location: Sydney, AU
Contact:

Re: Updating / Patching?

Post by DavidRa »

Seems like a reasonable approach, but it will take some time to get right. In the meantime - any suggestions on things to update and how?
User avatar
darky83
Site Admin
Posts: 540
Joined: 30 Sep 2012 11:03
Location: eFa
Contact:

Re: Updating / Patching?

Post by darky83 »

A bit late reply but have been busy a bit :?

Well most is already updated with a daily script (like GeoIP)

You can check when your GeoIP DB file was last updated by looking at the file date:

Code: Select all

ls -lah /usr/share/GeoIP/
Should be the current date or yesterday (updated once a day)

Other things that are auto updated are:

Code: Select all

/usr/sbin/update_phishing_sites
/usr/sbin/update_bad_phishing_emails
/usr/sbin/update_virus_scanners
Packages should be upgraded manually (for now) with:

Code: Select all

echo "mailscanner hold" | dpkg --set-selections
echo "baruwa hold" | dpkg --set-selections
apt-get update
apt-get -y upgrade
So in general 'rules and Databases' should be updated already automatically, only system packages needs some work as far as I can tell for now.
Version eFa 4.x now available!
Post Reply