Re: Updated Pump and Dump rules. 2006-02-23
On Friday 24 February 2006 09:42, Bowie Bailey wrote: >Gene Heskett wrote: >> On Friday 24 February 2006 09:06, Bowie Bailey wrote: >> > Gene Heskett wrote: >> > > On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: >> > > > On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: >> > > > > >> > > > > I don't seem to be getting any email from RDJ recently. >> > > > > Maybe since the time I switch this system from fetchmail to >> > > > > a mailfile, and from there had kmail running SA which was a >> > > > > cpu killer. Now I have fetchmail handing it off to >> > > > > procmail, which is doing the SA application and things are >> > > > > quite a bit happier. >> > > > > >> > > > > I didn't play with sendmail so its still supposedly handling >> > > > > the locally generated emails, and I just looked in >> > > > > /var/spool/mail and all accounts there are at 0 length so >> > > > > kmail is indeed picking up everything put there. If RDJ is >> > > > > sending me email from its early morning run, its getting >> > > > > lost someplace. >> > > > > >> > > > > Also, where would it put it if it did dl a new version of >> > > > > itself? >> > > > >> > > > Probably in /etc/mail/spamassassin/RulesDuJour/. >> > > >> > > And you are correct, its the same length anyway, as the one I >> > > dl'd DBY and installed by hand. Now to figure out why its not >> > > sending me email. >> > > >> > > A snippet or 3 from a 'crontab -l' as root: >> > > [EMAIL PROTECTED] >> > > 06 22 * * * /etc/init.d/asmb restart >> > > 40 4 * * 0 /root/bin/fetchmail-restart >> > > 37 6 * * * /usr/local/sbin/rules_du_jour >> > > >> > > And I am getting email from the first 2 of those, but not the >> > > third. The 2nd one is to allow logrotate to close the logfiles >> > > and reopen them. However, I may have to delay that more than 4 >> > > minutes it appears. >> > >> > RDJ has it's own email settings. Add a line to your RDJ config >> > file: >> > >> > MAIL_ADDRESS="[EMAIL PROTECTED]" >> >> Ok, this was set to gene, whose also in the kmail suckage list, and >> who does get email ok as thats the user who runs the email system >> here. >> >> And I note that if I run RDJ by hand, all steps involving curl are >> returning a '304', an error code not defined in the manpage. Any >> idea what that means? > >This how RDJ sends mail. Try it as root on your box and see what >happens. > >echo -e "test email" | \ >sh -c "mail -s \"Test subject\" [EMAIL PROTECTED]"; Did that. Got the mail ok. Also got one sent to [EMAIL PROTECTED] But I didn't get one from RDJ this morning. So thats a puzzler. >A 304 status code indicates that the page has not been changed and >does not need to be downloaded. I believe this is normal unless one >of the rule sets has changed. I see, thanks. -- Cheers, Gene People having trouble with vz bouncing email to me should add the word 'online' between the 'verizon', and the dot which bypasses vz's stupid bounce rules. I do use spamassassin too. :-) Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2006 by Maurice Eugene Heskett, all rights reserved.
RE: Updated Pump and Dump rules. 2006-02-23
Gene Heskett wrote: > On Friday 24 February 2006 09:06, Bowie Bailey wrote: > > Gene Heskett wrote: > > > On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: > > > > On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: > > > > > > > > > > I don't seem to be getting any email from RDJ recently. Maybe > > > > > since the time I switch this system from fetchmail to a > > > > > mailfile, and from there had kmail running SA which was a cpu > > > > > killer. Now I have fetchmail handing it off to procmail, > > > > > which is doing the SA application and things are quite a bit > > > > > happier. > > > > > > > > > > I didn't play with sendmail so its still supposedly handling > > > > > the locally generated emails, and I just looked in > > > > > /var/spool/mail and all accounts there are at 0 length so > > > > > kmail is indeed picking up everything put there. If RDJ is > > > > > sending me email from its early morning run, its getting lost > > > > > someplace. > > > > > > > > > > Also, where would it put it if it did dl a new version of > > > > > itself? > > > > > > > > Probably in /etc/mail/spamassassin/RulesDuJour/. > > > > > > And you are correct, its the same length anyway, as the one I dl'd > > > DBY and installed by hand. Now to figure out why its not sending > > > me email. > > > > > > A snippet or 3 from a 'crontab -l' as root: > > > [EMAIL PROTECTED] > > > 06 22 * * * /etc/init.d/asmb restart > > > 40 4 * * 0 /root/bin/fetchmail-restart > > > 37 6 * * * /usr/local/sbin/rules_du_jour > > > > > > And I am getting email from the first 2 of those, but not the > > > third. The 2nd one is to allow logrotate to close the logfiles > > > and reopen them. However, I may have to delay that more than 4 > > > minutes it appears. > > > > RDJ has it's own email settings. Add a line to your RDJ config > > file: > > > > MAIL_ADDRESS="[EMAIL PROTECTED]" > > Ok, this was set to gene, whose also in the kmail suckage list, and > who does get email ok as thats the user who runs the email system > here. > > And I note that if I run RDJ by hand, all steps involving curl are > returning a '304', an error code not defined in the manpage. Any idea > what that means? This how RDJ sends mail. Try it as root on your box and see what happens. echo -e "test email" | \ sh -c "mail -s \"Test subject\" [EMAIL PROTECTED]"; A 304 status code indicates that the page has not been changed and does not need to be downloaded. I believe this is normal unless one of the rule sets has changed. -- Bowie
Re: Updated Pump and Dump rules. 2006-02-23
On Fri, Feb 24, 2006 at 12:25:02AM -0500, Gene Heskett wrote: > On Thursday 23 February 2006 23:20, Bob McClure Jr wrote: > >On Thu, Feb 23, 2006 at 10:59:02PM -0500, Gene Heskett wrote: > >> > >> A snippet or 3 from a 'crontab -l' as root: > >> [EMAIL PROTECTED] > >> 06 22 * * * /etc/init.d/asmb restart > >> 40 4 * * 0 /root/bin/fetchmail-restart > >> 37 6 * * * /usr/local/sbin/rules_du_jour > >> > >> And I am getting email from the first 2 of those, but not the third. > >> The 2nd one is to allow logrotate to close the logfiles and reopen > >> them. However, I may have to delay that more than 4 minutes it > >> appears. > > > >You might check your maillog for clues timestamped around 0637 every > >morning. There's probably a forehead slapper in there. (Most of my > >trips to /var/log/maillog result in a slap to the forehead.) > > > >Check also your wrapper (I use my_rules_du_jour to call rules_du_jour) > >or config file (normally /etc/rulesdujour/config) for settings of > >MAIL_ADDRESS, SINGLE_EMAIL_ONLY, EMAIL_RDJ_UPDATE_ONLY, and MAILCMD. > >If those aren't set, and there's an alias for root in /etc/aliases > >that gets to you, it should work sensibly. > > There is absolutely nothing in them back to maillog.4 that references > rules_du_jour. > > But a study did show me two problems, first although its running as the > user, it was bitching about the existance of a procmailrc file > in /etc/procmail, so I just renamed that which seems to have taken care > of that bitch. One less line in the logs per message per spamd client. > > However, I'm also left with litterally megabytes of this below snippet > since it occurs for every incoming message processed by spamd, and its > something that I'd expect to see in procmail.log since its the spamd > caller, but I am not. I was not aware that spamd kept it mutterings in > maillog. My bad of course. > > > Feb 24 00:09:27 coyote spamd[31012]: Can't locate IP/Country/Fast.pm in > @INC (@INC > contains: ../lib /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi > /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/5.8.3/i386-linux-thread-multi > /usr/lib/perl5/5.8.3 /usr/lib/perl5/site_perl/5.8.2/i386-linux-thread-multi > /usr/lib/perl5/site_perl/5.8.1/i386-linux-thread-multi > /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi > /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 > /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl > /usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi > /usr/lib/perl5/vendor_perl/5.8.2/i386-linux-thread-multi > /usr/lib/perl5/vendor_perl/5.8.1/i386-linux-thread-multi > /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi > /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 > /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 > /usr/lib/perl5/vendor_perl) > at /usr/lib/perl5/site_perl/5.8.3/Mail/SpamAssassin/Plugin/RelayCountry.pm > line 66, line 57. > > > I'm reasonably sure all that stuff is installed *someplace* cause I got > a whole wagonload of them from cpan at the time I installed > spamassassin. So where do I look to see whats mis-configured at lines > 66 and 57? Probably a /usr vs /usr/local thing I'd guess. I'd assume > it would work better but even slower if the spamd children could find > their stuff... Do this: cpan install IP::Country That should stop that yipe. > >> -- > >> Cheers, Gene > > > >Cheers, > > -- > Cheers, Gene Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com The best things in life aren't things.
Re: Updated Pump and Dump rules. 2006-02-23
On Friday 24 February 2006 09:06, Bowie Bailey wrote: >Gene Heskett wrote: >> On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: >> > On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: >> > > >> > > I don't seem to be getting any email from RDJ recently. Maybe >> > > since the time I switch this system from fetchmail to a >> > > mailfile, and from there had kmail running SA which was a cpu >> > > killer. Now I have fetchmail handing it off to procmail, which >> > > is doing the SA application and things are quite a bit happier. >> > > >> > > I didn't play with sendmail so its still supposedly handling the >> > > locally generated emails, and I just looked in /var/spool/mail >> > > and all accounts there are at 0 length so kmail is indeed >> > > picking up everything put there. If RDJ is sending me email >> > > from its early morning run, its getting lost someplace. >> > > >> > > Also, where would it put it if it did dl a new version of >> > > itself? >> > >> > Probably in /etc/mail/spamassassin/RulesDuJour/. >> >> And you are correct, its the same length anyway, as the one I dl'd >> DBY and installed by hand. Now to figure out why its not sending me >> email. >> >> A snippet or 3 from a 'crontab -l' as root: >> [EMAIL PROTECTED] >> 06 22 * * * /etc/init.d/asmb restart >> 40 4 * * 0 /root/bin/fetchmail-restart >> 37 6 * * * /usr/local/sbin/rules_du_jour >> >> And I am getting email from the first 2 of those, but not the third. >> The 2nd one is to allow logrotate to close the logfiles and reopen >> them. However, I may have to delay that more than 4 minutes it >> appears. > >RDJ has it's own email settings. Add a line to your RDJ config file: > >MAIL_ADDRESS="[EMAIL PROTECTED]" Ok, this was set to gene, whose also in the kmail suckage list, and who does get email ok as thats the user who runs the email system here. And I note that if I run RDJ by hand, all steps involving curl are returning a '304', an error code not defined in the manpage. Any idea what that means? -- Cheers, Gene People having trouble with vz bouncing email to me should add the word 'online' between the 'verizon', and the dot which bypasses vz's stupid bounce rules. I do use spamassassin too. :-) Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2006 by Maurice Eugene Heskett, all rights reserved.
RE: Updated Pump and Dump rules. 2006-02-23
Gene Heskett wrote: > On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: > > On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: > > > > > > I don't seem to be getting any email from RDJ recently. Maybe > > > since the time I switch this system from fetchmail to a mailfile, > > > and from there had kmail running SA which was a cpu killer. Now > > > I have fetchmail handing it off to procmail, which is doing the SA > > > application and things are quite a bit happier. > > > > > > I didn't play with sendmail so its still supposedly handling the > > > locally generated emails, and I just looked in /var/spool/mail and > > > all accounts there are at 0 length so kmail is indeed picking up > > > everything put there. If RDJ is sending me email from its early > > > morning run, its getting lost someplace. > > > > > > Also, where would it put it if it did dl a new version of itself? > > > > Probably in /etc/mail/spamassassin/RulesDuJour/. > > > And you are correct, its the same length anyway, as the one I dl'd DBY > and installed by hand. Now to figure out why its not sending me > email. > > A snippet or 3 from a 'crontab -l' as root: > [EMAIL PROTECTED] > 06 22 * * * /etc/init.d/asmb restart > 40 4 * * 0 /root/bin/fetchmail-restart > 37 6 * * * /usr/local/sbin/rules_du_jour > > And I am getting email from the first 2 of those, but not the third. > The 2nd one is to allow logrotate to close the logfiles and reopen > them. However, I may have to delay that more than 4 minutes it > appears. RDJ has it's own email settings. Add a line to your RDJ config file: MAIL_ADDRESS="[EMAIL PROTECTED]" -- Bowie
Re: Updated Pump and Dump rules. 2006-02-23
On Thursday 23 February 2006 23:20, Bob McClure Jr wrote: >On Thu, Feb 23, 2006 at 10:59:02PM -0500, Gene Heskett wrote: >> On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: >> >On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: >> >> >> >> >> >> Also, where would it put it if it did dl a new version of itself? >> > >> >Probably in /etc/mail/spamassassin/RulesDuJour/. >> >> And you are correct, its the same length anyway, as the one I dl'd >> DBY and installed by hand. Now to figure out why its not sending me >> email. >> >> A snippet or 3 from a 'crontab -l' as root: >> [EMAIL PROTECTED] >> 06 22 * * * /etc/init.d/asmb restart >> 40 4 * * 0 /root/bin/fetchmail-restart >> 37 6 * * * /usr/local/sbin/rules_du_jour >> >> And I am getting email from the first 2 of those, but not the third. >> The 2nd one is to allow logrotate to close the logfiles and reopen >> them. However, I may have to delay that more than 4 minutes it >> appears. > >You might check your maillog for clues timestamped around 0637 every >morning. There's probably a forehead slapper in there. (Most of my >trips to /var/log/maillog result in a slap to the forehead.) > >Check also your wrapper (I use my_rules_du_jour to call rules_du_jour) >or config file (normally /etc/rulesdujour/config) for settings of >MAIL_ADDRESS, SINGLE_EMAIL_ONLY, EMAIL_RDJ_UPDATE_ONLY, and MAILCMD. >If those aren't set, and there's an alias for root in /etc/aliases >that gets to you, it should work sensibly. There is absolutely nothing in them back to maillog.4 that references rules_du_jour. But a study did show me two problems, first although its running as the user, it was bitching about the existance of a procmailrc file in /etc/procmail, so I just renamed that which seems to have taken care of that bitch. One less line in the logs per message per spamd client. However, I'm also left with litterally megabytes of this below snippet since it occurs for every incoming message processed by spamd, and its something that I'd expect to see in procmail.log since its the spamd caller, but I am not. I was not aware that spamd kept it mutterings in maillog. My bad of course. Feb 24 00:09:27 coyote spamd[31012]: Can't locate IP/Country/Fast.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/5.8.3/i386-linux-thread-multi /usr/lib/perl5/5.8.3 /usr/lib/perl5/site_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.8.3/Mail/SpamAssassin/Plugin/RelayCountry.pm line 66, line 57. I'm reasonably sure all that stuff is installed *someplace* cause I got a whole wagonload of them from cpan at the time I installed spamassassin. So where do I look to see whats mis-configured at lines 66 and 57? Probably a /usr vs /usr/local thing I'd guess. I'd assume it would work better but even slower if the spamd children could find their stuff... >> -- >> Cheers, Gene > >Cheers, -- Cheers, Gene People having trouble with vz bouncing email to me should add the word 'online' between the 'verizon', and the dot which bypasses vz's stupid bounce rules. I do use spamassassin too. :-) Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2006 by Maurice Eugene Heskett, all rights reserved.
Re: Updated Pump and Dump rules. 2006-02-23
On Thu, Feb 23, 2006 at 10:59:02PM -0500, Gene Heskett wrote: > On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: > >On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: > >> > >> > >> Also, where would it put it if it did dl a new version of itself? > > > >Probably in /etc/mail/spamassassin/RulesDuJour/. > > > And you are correct, its the same length anyway, as the one I dl'd DBY > and installed by hand. Now to figure out why its not sending me email. > > A snippet or 3 from a 'crontab -l' as root: > [EMAIL PROTECTED] > 06 22 * * * /etc/init.d/asmb restart > 40 4 * * 0 /root/bin/fetchmail-restart > 37 6 * * * /usr/local/sbin/rules_du_jour > > And I am getting email from the first 2 of those, but not the third. > The 2nd one is to allow logrotate to close the logfiles and reopen them. > However, I may have to delay that more than 4 minutes it appears. You might check your maillog for clues timestamped around 0637 every morning. There's probably a forehead slapper in there. (Most of my trips to /var/log/maillog result in a slap to the forehead.) Check also your wrapper (I use my_rules_du_jour to call rules_du_jour) or config file (normally /etc/rulesdujour/config) for settings of MAIL_ADDRESS, SINGLE_EMAIL_ONLY, EMAIL_RDJ_UPDATE_ONLY, and MAILCMD. If those aren't set, and there's an alias for root in /etc/aliases that gets to you, it should work sensibly. > -- > Cheers, Gene Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com The best things in life aren't things.
Re: Updated Pump and Dump rules. 2006-02-23
On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: >On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: >> >> I don't seem to be getting any email from RDJ recently. Maybe since >> the time I switch this system from fetchmail to a mailfile, and from >> there had kmail running SA which was a cpu killer. Now I have >> fetchmail handing it off to procmail, which is doing the SA >> application and things are quite a bit happier. >> >> I didn't play with sendmail so its still supposedly handling the >> locally generated emails, and I just looked in /var/spool/mail and >> all accounts there are at 0 length so kmail is indeed picking up >> everything put there. If RDJ is sending me email from its early >> morning run, its getting lost someplace. >> >> Also, where would it put it if it did dl a new version of itself? > >Probably in /etc/mail/spamassassin/RulesDuJour/. > And you are correct, its the same length anyway, as the one I dl'd DBY and installed by hand. Now to figure out why its not sending me email. A snippet or 3 from a 'crontab -l' as root: [EMAIL PROTECTED] 06 22 * * * /etc/init.d/asmb restart 40 4 * * 0 /root/bin/fetchmail-restart 37 6 * * * /usr/local/sbin/rules_du_jour And I am getting email from the first 2 of those, but not the third. The 2nd one is to allow logrotate to close the logfiles and reopen them. However, I may have to delay that more than 4 minutes it appears. -- Cheers, Gene People having trouble with vz bouncing email to me should add the word 'online' between the 'verizon', and the dot which bypasses vz's stupid bounce rules. I do use spamassassin too. :-) Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2006 by Maurice Eugene Heskett, all rights reserved.
Re: Updated Pump and Dump rules. 2006-02-23
On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: > > I don't seem to be getting any email from RDJ recently. Maybe since the > time I switch this system from fetchmail to a mailfile, and from there > had kmail running SA which was a cpu killer. Now I have fetchmail > handing it off to procmail, which is doing the SA application and > things are quite a bit happier. > > I didn't play with sendmail so its still supposedly handling the locally > generated emails, and I just looked in /var/spool/mail and all accounts > there are at 0 length so kmail is indeed picking up everything put > there. If RDJ is sending me email from its early morning run, its > getting lost someplace. > > Also, where would it put it if it did dl a new version of itself? Probably in /etc/mail/spamassassin/RulesDuJour/. > -- > Cheers, Gene Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com The best things in life aren't things.
Re: Updated Pump and Dump rules. 2006-02-23
On Thursday 23 February 2006 09:50, Bowie Bailey wrote: >Doc Schneider wrote: >> Gene Heskett wrote: >> > On Thursday 23 February 2006 01:06, Doc Schneider wrote: >> > > I just committed version 01.00.08 of this ruleset to: >> > > >> > > http://rulesemporium.com/rules/70_sare_stocks.cf >> > > >> > > It should appear within the hour. >> > >> > I've copied this one from that link into the directory where these >> > things live, and added a "SARE_STOCKS" to the list in the config >> > file, but rules_du_jour claims its not a valid item. Reporting >> > this: >> > >> > No index found for ruleset named SARE_STOCKS. Check that this >> > ruleset is still valid. >> > >> > I'd also gotten rid of SARE_RANDOMVAL from the config for the same >> > reason. Is there something I've forgotten to do to enable this >> > rule set? >> >> Have you upgraded and installed the newest RDJ? This has come up on >> this list a lot recently and from what I understand is that RDJ does >> auto download its newest version but it doesn't auto install it. >> >> Let me know if that works. > >Keep an eye on the email output from RDJ. It will tell you whenever > it updates a rule set, and it will also tell you whenever it > downloads a new version of itself. > >I think this is coming up so much recently because it's been a while >since the last rule set was added in. Nobody notices that they have > an old version of RDJ until they try to add the new rule set. I don't seem to be getting any email from RDJ recently. Maybe since the time I switch this system from fetchmail to a mailfile, and from there had kmail running SA which was a cpu killer. Now I have fetchmail handing it off to procmail, which is doing the SA application and things are quite a bit happier. I didn't play with sendmail so its still supposedly handling the locally generated emails, and I just looked in /var/spool/mail and all accounts there are at 0 length so kmail is indeed picking up everything put there. If RDJ is sending me email from its early morning run, its getting lost someplace. Also, where would it put it if it did dl a new version of itself? -- Cheers, Gene People having trouble with vz bouncing email to me should add the word 'online' between the 'verizon', and the dot which bypasses vz's stupid bounce rules. I do use spamassassin too. :-) Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2006 by Maurice Eugene Heskett, all rights reserved.
Re: Updated Pump and Dump rules. 2006-02-23
- Original Message - From: "Doc Schneider" <[EMAIL PROTECTED]> To: "Sandy S" <[EMAIL PROTECTED]> Cc: Sent: Thursday, February 23, 2006 2:24 PM Subject: Re: Updated Pump and Dump rules. 2006-02-23 > Sandy S wrote: > > - Original Message - > > From: "Doc Schneider" <[EMAIL PROTECTED]> > > To: > > Sent: Thursday, February 23, 2006 12:06 AM > > Subject: Updated Pump and Dump rules. 2006-02-23 > > > > > >> I just committed version 01.00.08 of this ruleset to: > >> > >> http://rulesemporium.com/rules/70_sare_stocks.cf > >> > >> It should appear within the hour. > >> > >> Enjoy. > >> > >> -Doc (SA/SARE/URIBL/SURBL -- Ninja) > >> > > > > Just a quick note - on the www.rulesemporium.com page it shows a last > > updated date of 02/05/2006 for this ruleset, and the last update date in the > > file itself shows 2006-02-20. Can they be updated? It may sound minor but > > if you don't use Rules du Jour you depend on those dates to let you know if > > you're running with the latest ruleset or not. > > > > Thanks, > > Sandy > > Sandy, > > My bad in not fixing the Modified date in the rule set itself. Most > folks, though, key off the # version 01.00.08 and or the actual files > time to update. I'll fix the Date Modified on the next version and also > will fix the webpage too. 8*)) > > I take it your using this set? How's it working for you? > > Thanks! > > -Doc > Aargh - I should really be checking the version numbers! Sorry about that. I don't have any statistics on this particular ruleset but I've definitely seen it hitting on a lot of those very annoying image-only stock spams that otherwise seem so hard to catch. I like it :-) Sandy
Re: Updated Pump and Dump rules. 2006-02-23
Sandy S wrote: - Original Message - From: "Doc Schneider" <[EMAIL PROTECTED]> To: Sent: Thursday, February 23, 2006 12:06 AM Subject: Updated Pump and Dump rules. 2006-02-23 I just committed version 01.00.08 of this ruleset to: http://rulesemporium.com/rules/70_sare_stocks.cf It should appear within the hour. Enjoy. -Doc (SA/SARE/URIBL/SURBL -- Ninja) Just a quick note - on the www.rulesemporium.com page it shows a last updated date of 02/05/2006 for this ruleset, and the last update date in the file itself shows 2006-02-20. Can they be updated? It may sound minor but if you don't use Rules du Jour you depend on those dates to let you know if you're running with the latest ruleset or not. Thanks, Sandy Sandy, My bad in not fixing the Modified date in the rule set itself. Most folks, though, key off the # version 01.00.08 and or the actual files time to update. I'll fix the Date Modified on the next version and also will fix the webpage too. 8*)) I take it your using this set? How's it working for you? Thanks! -Doc
Re: Updated Pump and Dump rules. 2006-02-23
- Original Message - From: "Doc Schneider" <[EMAIL PROTECTED]> To: Sent: Thursday, February 23, 2006 12:06 AM Subject: Updated Pump and Dump rules. 2006-02-23 > I just committed version 01.00.08 of this ruleset to: > > http://rulesemporium.com/rules/70_sare_stocks.cf > > It should appear within the hour. > > Enjoy. > > -Doc (SA/SARE/URIBL/SURBL -- Ninja) > Just a quick note - on the www.rulesemporium.com page it shows a last updated date of 02/05/2006 for this ruleset, and the last update date in the file itself shows 2006-02-20. Can they be updated? It may sound minor but if you don't use Rules du Jour you depend on those dates to let you know if you're running with the latest ruleset or not. Thanks, Sandy
RE: Updated Pump and Dump rules. 2006-02-23
Doc Schneider wrote: > Gene Heskett wrote: > > On Thursday 23 February 2006 01:06, Doc Schneider wrote: > > > I just committed version 01.00.08 of this ruleset to: > > > > > > http://rulesemporium.com/rules/70_sare_stocks.cf > > > > > > It should appear within the hour. > > > > I've copied this one from that link into the directory where these > > things live, and added a "SARE_STOCKS" to the list in the config > > file, but rules_du_jour claims its not a valid item. Reporting > > this: > > > > No index found for ruleset named SARE_STOCKS. Check that this > > ruleset is still valid. > > > > I'd also gotten rid of SARE_RANDOMVAL from the config for the same > > reason. Is there something I've forgotten to do to enable this > > rule set? > > Have you upgraded and installed the newest RDJ? This has come up on > this list a lot recently and from what I understand is that RDJ does > auto download its newest version but it doesn't auto install it. > > Let me know if that works. Keep an eye on the email output from RDJ. It will tell you whenever it updates a rule set, and it will also tell you whenever it downloads a new version of itself. I think this is coming up so much recently because it's been a while since the last rule set was added in. Nobody notices that they have an old version of RDJ until they try to add the new rule set. -- Bowie
Re: Updated Pump and Dump rules. 2006-02-23
Gene Heskett wrote: On Thursday 23 February 2006 01:06, Doc Schneider wrote: I just committed version 01.00.08 of this ruleset to: http://rulesemporium.com/rules/70_sare_stocks.cf It should appear within the hour. Enjoy. -Doc (SA/SARE/URIBL/SURBL -- Ninja) I've copied this one from that link into the directory where these things live, and added a "SARE_STOCKS" to the list in the config file, but rules_du_jour claims its not a valid item. Reporting this: No index found for ruleset named SARE_STOCKS. Check that this ruleset is still valid. I'd also gotten rid of SARE_RANDOMVAL from the config for the same reason. Is there something I've forgotten to do to enable this rule set? Have you upgraded and installed the newest RDJ? This has come up on this list a lot recently and from what I understand is that RDJ does auto download its newest version but it doesn't auto install it. Let me know if that works. -Doc
Re: Updated Pump and Dump rules. 2006-02-23
On Thursday 23 February 2006 01:06, Doc Schneider wrote: >I just committed version 01.00.08 of this ruleset to: > >http://rulesemporium.com/rules/70_sare_stocks.cf > >It should appear within the hour. > >Enjoy. > >-Doc (SA/SARE/URIBL/SURBL -- Ninja) I've copied this one from that link into the directory where these things live, and added a "SARE_STOCKS" to the list in the config file, but rules_du_jour claims its not a valid item. Reporting this: No index found for ruleset named SARE_STOCKS. Check that this ruleset is still valid. I'd also gotten rid of SARE_RANDOMVAL from the config for the same reason. Is there something I've forgotten to do to enable this rule set? -- Cheers, Gene People having trouble with vz bouncing email to me should add the word 'online' between the 'verizon', and the dot which bypasses vz's stupid bounce rules. I do use spamassassin too. :-) Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2006 by Maurice Eugene Heskett, all rights reserved.
