Off-topic RDJ not working properly since DOS a few weeks back

Sun Jul 8 08:38:50 IST 2007

I think I've found a workaround in

http://saupdates.openprotect.com/

although its a different way of doing it... Now just need to work out how to just select the rules I want in that list...

________________________________
From: mailscanner-bounces at lists.mailscanner.info [mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jason Ede [j.ede at birchenallhowden.co.uk]
Sent: 08 July 2007 08:15
To: MailScanner discussion
Subject: RE: Off-topic RDJ not working properly since DOS a few weeks back

Forgot to add that I keep clearing out the RulesDuJour directory in /etc/mail/spamassassin...

________________________________
From: mailscanner-bounces at lists.mailscanner.info [mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jason Ede [j.ede at birchenallhowden.co.uk]
Sent: 08 July 2007 08:04
To: mailscanner at lists.mailscanner.info
Subject: Off-topic RDJ not working properly since DOS a few weeks back

Ok, I know this is sligtly off-topic, but has anyone else had problems with Rules_du_jour since the DDOS against sare and spamhaus a few weeks back?

It runs fine when run manually, but when it runs overnight automatically it fails to download at least one of the rulesets and then gets stuck as below...

***WARNING***: spamassassin --lint failed.
Rolling configuration files back, not restarting SpamAssassin.
Rollback command is:  mv -f /etc/mail/spamassassin/70_sare_evilnum0.cf /etc/mail/spamassassin/RulesDuJour/70_sare_evilnum0.cf.2; mv -f /etc/mail/spamassassin/RulesDuJour/70_sare_evilnum0.cf.20070708-0456 /etc/mail/spamassassin/70_sare_evilnum0.cf;

Lint output: [12337] warn: config: failed to parse line, skipping: <HTML><HEAD><META HTTP-EQUIV="Refresh" CONTENT="0.1">
[12337] warn: config: failed to parse line, skipping: <META HTTP-EQUIV="Pragma" CONTENT="no-cache">
[12337] warn: config: failed to parse line, skipping: <META HTTP-EQUIV="Expires" CONTENT="-1">
[12337] warn: config: failed to parse line, skipping: </HEAD></HTML>
[12337] warn: lint: 4 issues detected, please rerun with debug enabled for more information

The really odd thing is that it always seems to get stuck on the first of the rule sets (was tripwire, now evilnumbers!)

Jason
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20070708/14cee8a4/attachment.html