Rules du jour update error

Fri Jun 15 12:38:17 IST 2007

Marcello Anderlini wrote:
> In these last two day I'm getting this error when rules du jour try to
> update.
> 
> =================
> SARE Abused Redirect Subject Ruleset for SpamAssassin (post3.0.0) has
> changed on netra.database.it.
> Version line: 
> 
> ***WARNING***: /usr/bin/spamassassin -p
> /etc/MailScanner/spam.assassin.prefs.conf --lint failed.
> Rolling configuration files back, not restarting SpamAssassin.
> Rollback command is:  mv -f
> /etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf
> /etc/mail/spamassassin/RulesDuJour/72_sare_redirect_post3.0.0.cf.2; mv -f
> /etc/mail/spamassassin/RulesDuJour/72_sare_redirect_post3.0.0.cf.20070615-04
> 45 /etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf;
> 
> Lint output: [23588] warn: config: failed to parse line, skipping, in
> "/etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf": <HTML><HEAD><META
> HTTP-EQUIV="Refresh" CONTENT="0.1">
> [23588] warn: config: failed to parse line, skipping, in
> "/etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf": <META
> HTTP-EQUIV="Pragma" CONTENT="no-cache">
> [23588] warn: config: failed to parse line, skipping, in
> "/etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf": <META
> HTTP-EQUIV="Expires" CONTENT="-1">
> [23588] warn: config: failed to parse line, skipping, in
> "/etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf": </HEAD></HTML>
> [23588] warn: lint: 4 issues detected, please rerun with debug enabled for
> more information
> =================
> 
> 
> I get the same error on two machine, I've not changed nothing.
> 
> What could be ?
> 
> thanks
> 
> 
This started after the DDOS attacks earlier this week.  Go into the 
directory where you download the rules files (looks like 
/etc/mail/spamassassin/RulesDuJour) and check each of the files.  Erase 
the ones that only have the following garbage...

<HTML><HEAD><META> HTTP-EQUIV="Refresh" CONTENT="0.1">
<META> HTTP-EQUIV="Pragma" CONTENT="no-cache">
<META> HTTP-EQUIV="Expires" CONTENT="-1">
</HEAD></HTML>