Question on Signature on Spamassassin clamav

Sep 11, 2023
6
0
6
Bangkok
Hello,

I would like to confirm whether Proxmox Mail Gateway 8 will continue to receive SpamAssassin rule updates and ClamAV signature updates throughout its supported lifecycle.

Could you please advise:

  1. Will SpamAssassin signature/rule updates continue to be provided for PMG 8?
  2. Will ClamAV virus definition updates continue to be provided for PMG 8?
  3. Until what date or end-of-life milestone will these updates remain available?
  4. Are there any planned changes that would affect the availability of antispam or antivirus signature updates for PMG 8 systems?
Thank you

Regard,
 
Hello @movacialex

thanks for posting on the forum!

  1. Will SpamAssassin signature/rule updates continue to be provided for PMG 8?
  2. Will ClamAV virus definition updates continue to be provided for PMG 8?
  3. Until what date or end-of-life milestone will these updates remain available?
Since these signatures and rules are provided outside of the management scope of Proxmox the availability cannot be guaranteed.
PMG 8 uses a patched version SpamAssassin 4.0.1 which was released in 2024 [1] so since the project seemingly moves rather slowly i would think that compatibility with this version will be maintained for a while, but as i mentioned cannot be guaranteed.
For ClamAV it behaves similar. PMG 8 uses ClamAV 1.4.3 which is a Long-Term Release and will receive signature updates until Aug 2028 [2].

However since PMG 8 is based on Debian 12 and the base operating system will not receive updates after the EOL it is not recommended to run the system after Aug 2026 [3].
Since most PMGs are exposed to the internet this could create a considerable security risk.

Best regards
Jonas

[1] https://spamassassin.apache.org/new... Apache SpamAssassin 4.0.1 has been released!
[2] https://docs.clamav.net/faq/faq-eol.html#version-support-matrix
[3] https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#faq-support-table