sare rules

[Jeff A. Earickson]

On Tue, 15 Jul 2008, Richard Frovarp wrote:

> Date: Tue, 15 Jul 2008 11:56:17 -0500
> From: Richard Frovarp <richard.frovarp at sendit.nodak.edu>
> Reply-To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Subject: Re: sare rules
> 
> mailsysteam at googlemail.com wrote:
>> Hi,
>> 
>> I have followed Julian's instructions "HOWTO: Adding extra rulesets to 
>> SpamAssassin" from July 2007 and I am a bit lost. Can someone help please?
>> 
>> I am using his /etc/mail/spamassassin/jkf-channel-list.txt to list the 
>> channels I want, but the update doesn't work, I am not getting any new cf 
>> files.
>> 
>> If I run
>> /usr/bin/sa-update -D --channelfile 
>> /etc/mail/spamassassin/jkf-channel-list.txt --gpgkey 856AA88A
>> 
>> I get dns errors like:
>> dns: query failed: 
>> 4.1.3.99_sare_fraud_post25x.cf.sare.sa-update.dostech.net 
>> <http://4.1.3.99_sare_fraud_post25x.cf.sare.sa-update.dostech.net> => 
>> NXDOMAIN
>> channel: no updates available, skipping channel
>> 
>> I am using MailScanner version 4.70.6
>> 
>> Can someone point me in the right direction please?
>> 
>> Steve
> It should work. What happens when you run
>
> dig +short -t txt 4.1.3.99_sare_fraud_post25x.cf.sare.sa-update.dostech.net
>
> You should get back: "200506020000"

I ran this and that's what I got back.  What does this mean?  That the
rules at dostech haven't changed since 6/2/2005?  ???

FYI, my daily script is:

    /opt/perl5/bin/sa-update --nogpg    (for SA rules)
and
    /opt/perl5/bin/sa-update --allowplugins --gpgkey D1C035168C1EBC08464946DA258CDB3ABDE9DC10 --channel saupdates.openprotect.com

for SARE rules.  My SA rules have not updated since the SA 3.2.5
upgrade, and my SARE rules haven't changed in two or three months.
I've been wondering about all of this.

Jeff Earickson
Colby College