Re: rulesdujour question

2006-08-15 Thread Dimitri Yioulos
On Tuesday August 15 2006 12:41 pm, BG Mahesh wrote:
 hi

 /etc/rulesdujour/config reads,

 [EMAIL PROTECTED] RulesDuJour]# more /etc/rulesdujour/config
 TRUSTED_RULESETS=TRIPWIRE SARE_ADULT SARE_OBFU0 SARE_OBFU1
 SARE_URI0 SARE_URI1
 SA_DIR=/etc/mail/spamassassin
 MAIL_ADDRESS=[EMAIL PROTECTED]
 SA_RESTART=killall -HUP spamd

 Everytime we execute rules_du_jour cf files are downloaded into
 /etc/mail/spamassassin and /etc/mail/spamassassin/RulesDuJour
 Is this normal?

Yes.  The rules in /etc/mail/spamassassin are the ones read by SA.

 All cf files are duplicates in both these 
 directories and they look so old.


You really want to list the rules you want updated by RDJ in 
the /etc/rulesdujour/config file.  Some rules are older.

 [EMAIL PROTECTED] spamassassin]# ls -l RulesDuJour/
 total 428
 -rw-r--r--  1 root root  53868 Apr 20 14:30 70_sare_adult.cf
 -rw-r--r--  1 root root  51886 Oct  2  2005 70_sare_obfu0.cf
 -rw-r--r--  1 root root 106627 Oct  2  2005 70_sare_obfu1.cf
 -rw-r--r--  1 root root  17879 Oct  5  2005 70_sare_uri0.cf
 -rw-r--r--  1 root root  24248 Oct 11  2005 70_sare_uri1.cf
 -rw-r--r--  1 root root  56238 Jun  2  2005 99_FVGT_Tripwire.cf
 -rw-r--r--  1 root root  63479 Jan 30  2006 rules_du_jour

 Also what do I need to add to Trusted_rulesets to get image spam
 working?

Look in recent archives.  There have been active discussions about 
image spam.



 --
 --
 B.G. Mahesh

HTH.

Dimitri

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



RE: rulesdujour question

2006-08-15 Thread Bowie Bailey
BG Mahesh wrote:
 hi
 
 /etc/rulesdujour/config reads,
 
 [EMAIL PROTECTED] RulesDuJour]# more /etc/rulesdujour/config
 TRUSTED_RULESETS=TRIPWIRE SARE_ADULT SARE_OBFU0 SARE_OBFU1 SARE_URI0
 SARE_URI1 

There are quite a few good rule sets from SARE.  You may want to go to
www.rulesemporium.com/rules.htm and read through the descriptions.
SARE_STOCKS, in particular, is very useful right now.

 SA_DIR=/etc/mail/spamassassin
 MAIL_ADDRESS=[EMAIL PROTECTED]
 SA_RESTART=killall -HUP spamd
 
 Everytime we execute rules_du_jour cf files are downloaded into
 /etc/mail/spamassassin and /etc/mail/spamassassin/RulesDuJour Is this
 normal? All cf files are duplicates in both these directories and
 they look so old.  

That is normal.  SA will read its rules from /etc/mail/spamassassin.
/etc/mail/spamassassin/RulesDuJour is used by RDJ in its update
process.

 [EMAIL PROTECTED] spamassassin]# ls -l RulesDuJour/
 total 428
 -rw-r--r--  1 root root  53868 Apr 20 14:30 70_sare_adult.cf
 -rw-r--r--  1 root root  51886 Oct  2  2005 70_sare_obfu0.cf
 -rw-r--r--  1 root root 106627 Oct  2  2005 70_sare_obfu1.cf
 -rw-r--r--  1 root root  17879 Oct  5  2005 70_sare_uri0.cf
 -rw-r--r--  1 root root  24248 Oct 11  2005 70_sare_uri1.cf
 -rw-r--r--  1 root root  56238 Jun  2  2005 99_FVGT_Tripwire.cf
 -rw-r--r--  1 root root  63479 Jan 30  2006 rules_du_jour

Don't worry about this directory.  RDJ will take care of it.

 Also what do I need to add to Trusted_rulesets to get image spam
 working? 

Razor2 can help with image spam.  You may also want to take a look at
the fuzzyocr plugin.  There have been lots of discussions about it on
the list recently.

-- 
Bowie