
This document is about upgrading from qsheff-0.8 to qsheff-1.0.

Please read ChangeLog file to learn what is new in 1.0.

# http://www.enderunix.org/qsheff/qsheff-1.0.tar.gz
# tar -zxvf qsheff-1.0.tar.gz
# cd qsheff-1.0

UNINSTALL
=========

To uninstall qsheff-0.8:

# /usr/local/share/qsheff/uninstall.sh

INSTALL
=======

Please read INSTALL.

CONFIGURATION
=============

1.0 to 1.0-r1
-------------

Just overwrite qsheff.conf-default files on qsheff.conf.
debug_level: Set debug level. Log library will log messages has less than this value.
Default log_level is 99. So qsheff will log everything by default.

 level   Identifier   Comment
  0      ERR          Internal error.
  3      VIRUS        Antivirus software found a virus.
  5      FILTER       Custom filter program caught a spam pattern.
  7      WBLIST       White/black list module caught a spam pattern.
  9      BODY         Spam found in body.
 11      SUBJ         Spam found in subject line.
 13      ATTACH       Caught prohibited attach file.
 15      HEADER       Caught prohibited header word.
 17      EMPTY        Mail header is empty.
 21      SAFE         Succeed/safe email.

0.8 to 1.0-rX
-------------

Prior qsheff versions store configuration files under /usr/local/etc/
qsheff-1.0 uses PREFIX/etc/qsheff/ directory. PREFIX is /usr/local/ by default.

You can remove /usr/local/etc/qsheff.* files.

qsheff.rules:
-------------

a=all
b=body
s=subject

*** There should be only one word between ( and ) for body rules in qsheff.rules
*** You are free for subject rules

Examples:
a:(word1)(word2)...(wordN)
b:(word1)(word2)...(wordN)
s:(word1)(word2 word3 word4)

Dont use your old qsheff.rules file. It includes only subject rules. Open it and change all 'a:' lines to 's:' lines. You have to make a new line for each 'o:' rule.
a:(rule1)(rule2)
  s:(rule1)(rule2)

o:(rule1)(rule2)
  s:(rule1)
  s:(rule2)

You can add zabit.conf words as body rule.
Mehmet POMAK -> b:(Mehmet)(POMAK)

*** If you want to search a rule at the begining of word, use a blank before rule.
    b:( spamatbegining)

*** If you want to search a rule at the end of word, use a blank after rule.
    s:(spamatend )

*** If you want to search a rule in anywhere of word, don't use blank.
    b:(rule)

qsheff.conf:
------------

qsheff contains new configuration file parameters so you must not use the old qsheff configuration files.
enable_spam_prog is changed with enable_filter_prog. New variables:

enable_save_all: Saves all incoming/outgoing mails. For debugging.
enable_body_filter: enable/disable internal body filter.
enable_attach_filter: enable/disable attach filter.

qsheff.attach:
--------------

This file is coming with 1.0 version.
.exe
document.com

You can copy zabit-attach.conf file as /usr/local/etc/qsheff/qsheff.attach

Note: qsheff searching filenames from right. For example, '.com' rule will catch only *.com files.
It doesn't catch world.comm or test.com.exe. 'ment.exe' catches document.exe or Document.exe files.

qsheff.wblist:
--------------

There is no change.

# cp /usr/local/etc/qsheff.wblist /usr/local/etc/qsheff/qsheff.wblist

LOGGING
=======

1.0 also logs emails other than spam ones. You can increase/decrease log level.

# tail -f /var/log/qsheff.log

SAFE: Succeed/safe email.
FILTER: Custom filter program caught a spam pattern.
UNSAFE: Mail header is empty.
WBLIST: White/black list module caught a spam pattern.
SUBJ: Spam found in subject line.
BODY: Spam found in body.
ATTACH: Caught prohibited attach file.
VIRUS: Antivirus software found a virus.
EMPTY: From (or To) is empty. Mail dropped.
HEADER: Caught prohibited header word. Mail rejected.
ERR: Internal error.

$Id: UPGRADE,v 1.14 2005/08/14 20:16:43 simsek Exp $

