Re: v3.2.4 scan times slow

2008-02-15 Thread Jeff Chan
Quoting Sean Kennedy <[EMAIL PROTECTED]>: Sorry for replying to my own topic, but I've figured out what's causing it to go so slow. It's the rules in sa-blacklist.current.uri.cf from http://www.sa-blacklist.stearns.org/sa-blacklist/sa-blacklist.current.uri.cf. This ruleset works fine in 3.1, I

Re: v3.2.4 scan times slow

2008-02-15 Thread Matt Kettler
Sean Kennedy wrote: Sorry for replying to my own topic, but I've figured out what's causing it to go so slow. It's the rules in sa-blacklist.current.uri.cf from http://www.sa-blacklist.stearns.org/sa-blacklist/sa-blacklist.current.uri.cf. This ruleset works fine in 3.1, I'm not sure why it

Re: Whois info?

2008-02-15 Thread Duane Hill
On Fri, 15 Feb 2008 17:34:09 -0800 Marc Perkel <[EMAIL PROTECTED]> wrote: > Is there any place to easily query whois information to determine on > a mass scale how old a domain is? Don't know myself. All I can say is don't query whois on Network Solutions for possible availability of a domain to

Whois info?

2008-02-15 Thread Marc Perkel
Is there any place to easily query whois information to determine on a mass scale how old a domain is?

Re: Getting ? in spam scores.

2008-02-15 Thread fchan
Hello, Here is a complete sample without a link (because apache.org bounced the message due the "spam" content) with logs relevant to the message. I have tar.gz/tgz the message to hopefully pass the spam filter. Here is the message: Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTE

Re: v3.2.4 scan times slow

2008-02-15 Thread John Hardin
On Fri, 15 Feb 2008, Sean Kennedy wrote: It's the rules in sa-blacklist.current.uri.cf from http://www.sa-blacklist.stearns.org/sa-blacklist/sa-blacklist.current.uri.cf. This ruleset works fine in 3.1, I'm not sure why it doesn't in 3.2, any insight? Don't use it. It's a huge list of URIs t

Re: v3.2.4 scan times slow

2008-02-15 Thread Sean Kennedy
Sorry for replying to my own topic, but I've figured out what's causing it to go so slow. It's the rules in sa-blacklist.current.uri.cf from http://www.sa-blacklist.stearns.org/sa-blacklist/sa-blacklist.current.uri.cf. This ruleset works fine in 3.1, I'm not sure why it doesn't in 3.2, any i

RE: Rule for Russian character sets

2008-02-15 Thread Karsten Bräckelmann
On Fri, 2008-02-15 at 11:49 -0500, Rosenbaum, Larry M. wrote: > > From: Karsten Bräckelmann [mailto:[EMAIL PROTECTED] > > > > I've pointed it out before. Just use ok_locales, which is all about > > these char sets. No REs, almost no thinking required, no headache. A > > single line, and you're done

Re: Rule for Russian character sets

2008-02-15 Thread Karsten Bräckelmann
On Sat, 2008-02-16 at 04:26 +0800, [EMAIL PROTECTED] wrote: > KB> If you want to trigger on Russian only, list all but ru. > What if to catch Ms. Ba'loney Margar'ine, airport security had to keep a > current list of all the other people in the world. So this is the > wrong approach, as we've been

v3.2.4 scan times slow

2008-02-15 Thread Sean Kennedy
I recently upgraded from v3.1.9 to v3.2.4 and I've noticed a substantial increase in scan times. The general average scantime with v3.1 was about 1.2s and now with v3.2 it's about 2.2s. It's enough of a slow down so that my mail queue backs quite easily now. So I'm trying to debug SA and fig

Re: Rule for Russian character sets

2008-02-15 Thread jidanni
KB> If you want to trigger on Russian only, list all but ru. What if to catch Ms. Ba'loney Margar'ine, airport security had to keep a current list of all the other people in the world. So this is the wrong approach, as we've been thru before. OK, bye.

Re: Rule for Russian character sets

2008-02-15 Thread McDonald, Dan
On Fri, 2008-02-15 at 11:04 -0800, Paul Douglas Franklin wrote: > I believe that what you are asking for is > meta RUSSIAN_AND_BADTEXT (CHARSET_FARAWAY && __OTHER_RULE) > That requires first that you have set up ok_locales. If you have TextCat enabled, then the X-Language: meta header will be add

Re: Rule for Russian character sets

2008-02-15 Thread Paul Douglas Franklin
I believe that what you are asking for is meta RUSSIAN_AND_BADTEXT (CHARSET_FARAWAY && __OTHER_RULE) That requires first that you have set up ok_locales. --Paul Rosenbaum, Larry M. wrote: From: Karsten Bräckelmann [mailto:[EMAIL PROTECTED] I've pointed it out before. Just use ok_locales, which

RE: Rule for Russian character sets

2008-02-15 Thread Rosenbaum, Larry M.
> From: Karsten Bräckelmann [mailto:[EMAIL PROTECTED] > > I've pointed it out before. Just use ok_locales, which is all about > these char sets. No REs, almost no thinking required, no headache. A > single line, and you're done. What's the best way to test the character set for use in a meta rule?

RE: Rule for Russian character sets (=?koi8-r? not quite a charset)

2008-02-15 Thread Karsten Bräckelmann
On Fri, 2008-02-15 at 17:10 +1300, Michael Hutchinson wrote: > > From: Karsten Bräckelmann [mailto:[EMAIL PROTECTED] > > Why are you guys now trying to re-invent the wheel in the special case > > of a gray asphalt street? What about a dirt track, grass, and anything > > else a wheel works on? > >