Re: Rule Update Servers Coming Back!

[David Jones]

>From: David Mehler 
    
>Where is this new documentation located?

The documentation mentioned by Kevin has to do with internal
sysadmin documentation on how all of the nightly masscheck is
setup and maintained on the server.  I am making notes as I
rebuild everything and will eventually publish it on our new
sysadmin page:

https://wiki.apache.org/spamassassin/InfraNotes2017

>Will updating existing rules involve anything new?

No.  The new server will host everything identically.

I am seeing the nightly masscheck results being uploaded via
rsync.  The last part I will try to get working today is the processing
of the uploaded ham/spam logs to get the scoring working again at:

http://ruleqa.spamassassin.org/

We had to rebuild our DNS master for spamassassin.org and get
the slaving setup to the public DNS servers first.  Then I had to go
through various server backups and figure out what was running
and how it was running then set it up properly on the new server.

Dave


On 5/15/17, Pedro David Marco  wrote:
> Thanks a lot Kevin... Thanks a lot David
> --PedroD
>
>   From: Kevin A. McGrail 
>  To: Spamassassin ; SpamAssassin Devel List
> 
>  Sent: Sunday, May 14, 2017 4:11 PM
>  Subject: Rule Update Servers Coming Back!
>
> Just a quick update that thanks to some hard work by David Jones we've
> been getting the new SysAdmin's group for SpamAssassin humming along.
>
> Along with better documentation and an increased bus factor, DNS is now
> back online as well as rsync for sa-update and the mirrors.
>
> Regards,
> KAM
>
> --
> Kevin A. McGrail
> Asst. Treasurer, Apache Software Foundation
> Chair Emeritus Apache SpamAssassin Project
>
>
>
>

Re: Rule Update Servers Coming Back!

[David Mehler]

Hello,

Where is this new documentation located?

Will updating existing rules involve anything new?

Thanks.
Dave.


On 5/15/17, Pedro David Marco  wrote:
> Thanks a lot Kevin... Thanks a lot David
> --PedroD
>
>   From: Kevin A. McGrail 
>  To: Spamassassin ; SpamAssassin Devel List
> 
>  Sent: Sunday, May 14, 2017 4:11 PM
>  Subject: Rule Update Servers Coming Back!
>
> Just a quick update that thanks to some hard work by David Jones we've
> been getting the new SysAdmin's group for SpamAssassin humming along.
>
> Along with better documentation and an increased bus factor, DNS is now
> back online as well as rsync for sa-update and the mirrors.
>
> Regards,
> KAM
>
> --
> Kevin A. McGrail
> Asst. Treasurer, Apache Software Foundation
> Chair Emeritus Apache SpamAssassin Project
>
>
>
>

Re: Rule Update Servers Coming Back!

[Pedro David Marco]

Thanks a lot Kevin... Thanks a lot David
--PedroD

  From: Kevin A. McGrail 
 To: Spamassassin ; SpamAssassin Devel List 
 
 Sent: Sunday, May 14, 2017 4:11 PM
 Subject: Rule Update Servers Coming Back!
   
Just a quick update that thanks to some hard work by David Jones we've 
been getting the new SysAdmin's group for SpamAssassin humming along.

Along with better documentation and an increased bus factor, DNS is now 
back online as well as rsync for sa-update and the mirrors.

Regards,
KAM

-- 
Kevin A. McGrail
Asst. Treasurer, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project    



   

Rule Update Servers Coming Back!

[Kevin A. McGrail]

Just a quick update that thanks to some hard work by David Jones we've 
been getting the new SysAdmin's group for SpamAssassin humming along.


Along with better documentation and an increased bus factor, DNS is now 
back online as well as rsync for sa-update and the mirrors.


Regards,
KAM

--
Kevin A. McGrail
Asst. Treasurer, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project  

Re: Rule Update!

[Kevin A. McGrail]

On 6/16/2014 5:21 AM, Matthias Leisi wrote:
Traffic at sa-update mirror hosted at dnswl.org  
took off yesterday at around 16:00 UTC (graphs below are in UTC+02:00).


Thanks Matthias.  It's a bit rocky still.

I only have 5 different cron job output to compare and I think I found 
about 20 jobs :-(


And I have to track done any line that might be an error.

For example, I don't know if this is expected, normal or a major issue 
when I see things like


svn: Syntax error in revision argument 
'http://svn.apache.org/repos/asf/spamassassin/trunk'


Back to digging...

Regards,
KAM

[Fwd: Rule Update!]

[David Alexandre M. de Carvalho]

Good morning.
I can also confirm that the rules were updated on my server.
Thanks!

Rule Update!

[Daniel Staal]

I just wanted to say that my sa-update cronjob finally succeeded in 
updating the rules tonight.  Congrats and thanks to everyone who's been 
working on getting the update server back up and running; it appears you've 
succeeded.  ;)


Daniel T. Staal

---
This email copyright the author.  Unless otherwise noted, you
are expressly allowed to retransmit, quote, or otherwise use
the contents for non-commercial purposes.  This copyright will
expire 5 years after the author's death, or in 30 years,
whichever is longer, unless such a period is in excess of
local copyright law.
---

Re: Rule update just happened for the first time in two months

[Jim Popovitch]

On Mon, Oct 31, 2011 at 13:55,   wrote:
>
> Normally rules get updated every day, via sa-update.  They weren't
> for the last couple months due to a clock on a server being set wrong:
> https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6671

Interesting.  In my mind, it's a short walk from
out-of-sync-clock-issues to root-password-issues.   Does someone know,
beyond any doubt, that the system in question wasn't hacked/p0wned?

-Jim P.

Rule update just happened for the first time in two months

[darxus]

This is a good time to pay attention to weird behavior.  Rules showing up
that shouldn't have, stuff getting scored weird.  

Scores were regenerated yesterday (October 30th) for the first time since
August 27th:
http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?view=log

There *shouldn't* be any problems, but this is exactly the kind of
situation where the Spam Eating Monkey stuff leaked from dev into
production. 


Normally rules get updated every day, via sa-update.  They weren't
for the last couple months due to a clock on a server being set wrong:
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6671

-- 
"I don't want people who want to dance, I want people who have to dance."
--George Balanchine
http://www.ChaosReigns.com

Re: Serious problem with scores file for todays rule update?

[Michael Alan Dorman]

On Tue, 30 Dec 2008 09:55:52 +
"Justin Mason"  wrote:

> Does the sa-compile step complete with an exit code of 0?  If there
> are problems with re2c (which has happened in the past) it should exit
> with !=0.

There were no errors visible in the output, but the script I was using
to do the update is, of course, one of the few that I've written
without using /bin/sh -e, so even if sa-compile had failed, it would
have continued.

I suspect we can mark this down to re2c not liking something yesterday
+ I/O error.

Thanks, Justin,

Mike.

Re: Serious problem with scores file for todays rule update?

[Justin Mason]

On Mon, Dec 29, 2008 at 23:41, Michael Alan Dorman
 wrote:
> On Mon, 29 Dec 2008 23:21:48 +
> j...@jmason.org (Justin Mason) wrote:
>
>> hmm.  What do you have in /var/lib/spamassassin for the scores files?
>> they should look like this:
>>
>> : 183...; ls
>> -l /var/lib/spamassassin/3.002006/updates_spamassassin_org/50_scores.cf  
>> /var/lib/spamassassin/3.002006/updates_spamassassin_org/72_scores.cf
>> -rw-r--r-- 1 root root 48928 Dec 29
>> 23:20 /var/lib/spamassassin/3.002006/updates_spamassassin_org/50_scores.cf
>> -rw-r--r-- 1 root root  1392 Dec 29
>> 23:20 /var/lib/spamassassin/3.002006/updates_spamassassin_org/72_scores.cf
>
> Hey, Justin, thanks for the quick response.
>
> My 50_scores.cf is 48923, so it differs, but close enough.
>
> In fact, it didn't occur to me immediately, but further investigation
> (for lack of a better word for the last rather tense 45 minutes :) seems
> to be pointing the finger at sa-compile, rather than the scores.
>
> I got fixated on 72_scores.cf and totally forgot about 50_scores, which
> is why I was thinking scores at first.
>
> I'll be doing more testing and such, later, but just zapping the
> compiled files and restarting the processes seems to have taken care of
> it.
>
> If there's anything in particular you'd like me to do to try and help
> track the interaction down, please let me know.  I'm using re2c 0.13.5
> on debian amd64 boxes, and am happy to throw some time and resources at
> figuring out what's going on.

Does the sa-compile step complete with an exit code of 0?  If there
are problems with re2c (which has happened in the past) it should exit
with !=0.

--j.

Re: Serious problem with scores file for todays rule update?

[Michael Alan Dorman]

On Mon, 29 Dec 2008 23:21:48 +
j...@jmason.org (Justin Mason) wrote:

> hmm.  What do you have in /var/lib/spamassassin for the scores files?
> they should look like this:
> 
> : 183...; ls
> -l /var/lib/spamassassin/3.002006/updates_spamassassin_org/50_scores.cf  
> /var/lib/spamassassin/3.002006/updates_spamassassin_org/72_scores.cf
> -rw-r--r-- 1 root root 48928 Dec 29
> 23:20 /var/lib/spamassassin/3.002006/updates_spamassassin_org/50_scores.cf
> -rw-r--r-- 1 root root  1392 Dec 29
> 23:20 /var/lib/spamassassin/3.002006/updates_spamassassin_org/72_scores.cf

Hey, Justin, thanks for the quick response.

My 50_scores.cf is 48923, so it differs, but close enough.

In fact, it didn't occur to me immediately, but further investigation
(for lack of a better word for the last rather tense 45 minutes :) seems
to be pointing the finger at sa-compile, rather than the scores.

I got fixated on 72_scores.cf and totally forgot about 50_scores, which
is why I was thinking scores at first.

I'll be doing more testing and such, later, but just zapping the
compiled files and restarting the processes seems to have taken care of
it.

If there's anything in particular you'd like me to do to try and help
track the interaction down, please let me know.  I'm using re2c 0.13.5
on debian amd64 boxes, and am happy to throw some time and resources at
figuring out what's going on.

Mike.

Re: Serious problem with scores file for todays rule update?

[Justin Mason]

Michael Alan Dorman writes:
>Hey, all,
>
>I have a bunch of servers that picked up a rule update, 729912 this
>morning about 10am EST, at which point all hell broke loose---scores for
>everything but bayes dropped to almost nothing.
>
>Has anyone else experienced anything like this?

hmm.  What do you have in /var/lib/spamassassin for the scores files?
they should look like this:


: 183...; ls -l 
/var/lib/spamassassin/3.002006/updates_spamassassin_org/50_scores.cf  
/var/lib/spamassassin/3.002006/updates_spamassassin_org/72_scores.cf
-rw-r--r-- 1 root root 48928 Dec 29 23:20 
/var/lib/spamassassin/3.002006/updates_spamassassin_org/50_scores.cf
-rw-r--r-- 1 root root  1392 Dec 29 23:20 
/var/lib/spamassassin/3.002006/updates_spamassassin_org/72_scores.cf


--j.

Serious problem with scores file for todays rule update?

[Michael Alan Dorman]

Hey, all,

I have a bunch of servers that picked up a rule update, 729912 this
morning about 10am EST, at which point all hell broke loose---scores for
everything but bayes dropped to almost nothing.

Has anyone else experienced anything like this?

Mike.

Re: Rule update over DNS?

[Kenneth Porter]

--On Friday, December 08, 2006 12:20 AM -0500 Duncan Findlay 
<[EMAIL PROTECTED]> wrote:



That's a good point. Those of us packaging SpamAssassin for
distributions should think about this. :-) Will it be okay if all
Debian users start running sa-update on the same minute of the hour?


Are those distributions joining the list of update mirrors? Can the 
mirroring be done by DNS round-robin, so that a random HTTP server will be 
chosen for the update? Is there a failover scheme so that a system finding 
a slow mirror without the update will switch to another mirror that has the 
update?

Re: Rule update over DNS?

[Daryl C. W. O'Shea]

Duncan Findlay wrote:


Anyways... maybe I should get back to doing something useful like
studying for tomorrow's exam...


Boo exams... road trip!  I hear the 401 is fun at this time of year. ;)

Re: Rule update over DNS?

[Duncan Findlay]

On Thu, Dec 07, 2006 at 08:56:45PM +1300, Jason Haar wrote:
> If all SA users set sa-update to run hourly - then when an update comes
> out, you will have *all* SA users contacting the same sites
> simultaneously for the downloads. Och...

That's a good point. Those of us packaging SpamAssassin for
distributions should think about this. :-) Will it be okay if all
Debian users start running sa-update on the same minute of the hour?

-- 
Duncan Findlay


pgpj4XrsaueQ7.pgp
Description: PGP signature

Re: Rule update over DNS?

[Duncan Findlay]

On Thu, Dec 07, 2006 at 01:38:54PM -0500, Jim Maul wrote:
> >>I dont think anyone is using spamd to call SpamAssassin.

> oh?  Care to explain how spamd would call spamassassin? That would be a neat 
> trick ;)

Alright... I'm being pedantic, but you're confusing "spamassassin" and
"SpamAssassin". "spamassassin" (written in lower case) refers to the
perl script "/usr/bin/spamassassin" (or equivalent) which calls the
SpamAssassin libraries. When written in StudlyCaps or CamelCase,
"SpamAssassin (tm)" is an adjective. It should usually be written in a
phrase such as "the SpamAssassin Software" or "the SpamAssassin
engine". When it is used (incorrectly) as a noun, it usually refers to
one of the above.

So, spamd is always calling the SpamAssassin libraries and hence the
SpamAssassin software. It is not logical for spamd to call
spamassassin, though as Daryl pointed out it would not be difficult if
you chose to do that. :-)

Anyways... maybe I should get back to doing something useful like
studying for tomorrow's exam...

-- 
Duncan Findlay


pgp2dd6c1W0uG.pgp
Description: PGP signature

Re: Rule update over DNS?

[Daryl C. W. O'Shea]

Jim Maul wrote:

oh?  Care to explain how spamd would call spamassassin? That would be a 
neat trick ;)


Neat, but really simple with the plugin interface. :)

Re: Rule update over DNS?

[Justin Mason]

Jim Maul writes:
> Justin Mason wrote:
> > Jim Maul writes:
> >> Kelson wrote:
> >>> Jason Haar wrote:
>  May I propose that sa-update should become merged into spamd? (or
>  daemonized)
> >>> Merging would be bad. There are plenty of us using methods other than 
> >>> spamd to call SpamAssassin.
> >> I dont think anyone is using spamd to call SpamAssassin.
> > 
> > ???
> > 
> > one over here ;)
> 
> oh?  Care to explain how spamd would call spamassassin? That would be a 
> neat trick ;)

ah, I see where you're going!  Although in fact, you could say it's a
valid way to put it -- after all, spamd is just a script which calls the
Mail::SpamAssassin modules. ;)

--j.

Re: Rule update over DNS?

[Jim Maul]

Justin Mason wrote:

Jim Maul writes:

Kelson wrote:

Jason Haar wrote:

May I propose that sa-update should become merged into spamd? (or
daemonized)
Merging would be bad. There are plenty of us using methods other than 
spamd to call SpamAssassin.

I dont think anyone is using spamd to call SpamAssassin.


???

one over here ;)

--j.





oh?  Care to explain how spamd would call spamassassin? That would be a 
neat trick ;)


-Jim

Re: Rule update over DNS?

[Justin Mason]

Jim Maul writes:
> Kelson wrote:
> > Jason Haar wrote:
> >> May I propose that sa-update should become merged into spamd? (or
> >> daemonized)
> > 
> > Merging would be bad. There are plenty of us using methods other than 
> > spamd to call SpamAssassin.
> 
> I dont think anyone is using spamd to call SpamAssassin.

???

one over here ;)

--j.

Re: Rule update over DNS?

[Jim Maul]

Kelson wrote:

Jason Haar wrote:

May I propose that sa-update should become merged into spamd? (or
daemonized)


Merging would be bad. There are plenty of us using methods other than 
spamd to call SpamAssassin.





I dont think anyone is using spamd to call SpamAssassin.

Re: Rule update over DNS?

[Kelson]

Jason Haar wrote:

May I propose that sa-update should become merged into spamd? (or
daemonized)


Merging would be bad. There are plenty of us using methods other than 
spamd to call SpamAssassin.


--
Kelson Vibber
SpeedGate Communications 

Re: Rule update over DNS?

[Theo Van Dinter]

On Thu, Dec 07, 2006 at 09:31:36AM +, Justin Mason wrote:
> > and got freshclam to run as a daemon - so it
> > could randomly sleep between lookups - and thus spread the load.
> 
> I can think of a useful modification -- change sa-update so that, if it's
> run non-interactively, it sleeps for a random amount of 0-600 seconds.
> That would reduce the hit.

I'm not sure how this would help exactly.  If people want to check for updates
once a minute, and sa-update sleeps randomly for up to 10m, this just means
their system will have (potentially) 10 sa-updates running at the same time.
Through the magic of randomness, all 10 of those could end up making requests
at the same time (or at least within the same minute), and that's a lot less
spread out than once a minute.

> However note that we also support any number of mirror servers, too.
> given that, I think it's doubtful we're going to run into this
> problem...

Yeah, the design, I think, is pretty scalable.

-- 
Randomly Selected Tagline:
"Don't ever make trouble here, I beat you up each time."
  - From Rumble in the Bronx


pgpVllgCOSCT6.pgp
Description: PGP signature

Re: Rule update over DNS?

[Justin Mason]

Jason Haar writes:
> Daryl C. W. O'Shea wrote:
> >
> > What's stopping you from running sa-update more frequently?  I run it
> > once an hour on most of my systems.
> May I propose that sa-update should become merged into spamd? (or
> daemonized)
> 
> I'm thinking of lessons learned with ClamAV. Once upon a time they
> relied on people running freshclam manually (via cron) to look for
> updates. People loved it. Tens of thousands loved it. Update servers got
> HAMMERED by people running freshclam every MINUTE.
> 
> So they did two things: Starting using DNS to tell freshclam if there
> really was a new update,

uh yeah, we do that already, for that reason! ;)

> and got freshclam to run as a daemon - so it
> could randomly sleep between lookups - and thus spread the load.

Well, that's a good point.

I can think of a useful modification -- change sa-update so that, if it's
run non-interactively, it sleeps for a random amount of 0-600 seconds.
That would reduce the hit.

(it's easy enough to tell if it's an interactive session; perl's
(-T STDIN) switch can tell if it's run from the command line
or cron.)

However note that we also support any number of mirror servers, too.
given that, I think it's doubtful we're going to run into this
problem...

--j.

> If all SA users set sa-update to run hourly - then when an update comes
> out, you will have *all* SA users contacting the same sites
> simultaneously for the downloads. Och...
> 
> OTOH, if a daemon (like spamd itself - or a daemonized version of
> sa-update I suppose) was responsible, it could do the initial DNS lookup
> every 0-3600 seconds (just an example) and download when it sees an
> update - thus spreading the load.
> 
> I know putting a "sleep `expr $RANDOM / 9` && sa-update"  does the same
> thing - but people won't do that...
> 
> -- 
> Cheers
> 
> Jason Haar
> Information Security Manager, Trimble Navigation Ltd.
> Phone: +64 3 9635 377 Fax: +64 3 9635 417
> PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

Re: Rule update over DNS?

[Jason Haar]

Daryl C. W. O'Shea wrote:
>
> What's stopping you from running sa-update more frequently?  I run it
> once an hour on most of my systems.
May I propose that sa-update should become merged into spamd? (or
daemonized)

I'm thinking of lessons learned with ClamAV. Once upon a time they
relied on people running freshclam manually (via cron) to look for
updates. People loved it. Tens of thousands loved it. Update servers got
HAMMERED by people running freshclam every MINUTE.

So they did two things: Starting using DNS to tell freshclam if there
really was a new update, and got freshclam to run as a daemon - so it
could randomly sleep between lookups - and thus spread the load.

If all SA users set sa-update to run hourly - then when an update comes
out, you will have *all* SA users contacting the same sites
simultaneously for the downloads. Och...

OTOH, if a daemon (like spamd itself - or a daemonized version of
sa-update I suppose) was responsible, it could do the initial DNS lookup
every 0-3600 seconds (just an example) and download when it sees an
update - thus spreading the load.

I know putting a "sleep `expr $RANDOM / 9` && sa-update"  does the same
thing - but people won't do that...

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

Re: Rule update over DNS?

[Kenneth Porter]

--On Wednesday, December 06, 2006 1:26 PM +0100 Matthias Leisi 
<[EMAIL PROTECTED]> wrote:



As such, DNS could be used as a transport mechanism with reasonably chosen
TTLs.


sa-update already uses DNS to check for new updates. The record provides 
the latest version of the update rule set. The actual rules are downloaded 
by HTTP (in 2 steps, first downloading a mirror list, then from one of the 
available mirrors), but only when a change in version is detected.

Re: Rule update over DNS?

[Daryl C. W. O'Shea]

Matthias Leisi wrote:

For certain kinds of spam, it would be advantageous to have a highly
dynamic set of rules (eg stock spams). The usual methods (à la sa-update)
are usually slow - slow as in "once or twice a day"; however I think it
would make sense to have them fast - fast as in "continuously updated".


What's stopping you from running sa-update more frequently?  I run it 
once an hour on most of my systems.




As such, DNS could be used as a transport mechanism with reasonably chosen
TTLs. As most rules are not that huge, they would usually fit into a
single TXT record. Updating these rules through DNS would allow efficient
"flood fill" distribution combined with DNS' cacheing characteristics.


It'd also be an efficient way to tamper with rulesets.  Off the top of 
my head I can't think of too many less secure ways to distribute rulesets.



Daryl

Re: Rule update over DNS?

[Theo Van Dinter]

On Wed, Dec 06, 2006 at 01:26:08PM +0100, Matthias Leisi wrote:
> For certain kinds of spam, it would be advantageous to have a highly
> dynamic set of rules (eg stock spams). The usual methods (à la sa-update)
> are usually slow - slow as in "once or twice a day"; however I think it
> would make sense to have them fast - fast as in "continuously updated".

"usually slow" defined as "as often as someone wants to publish rules", often
related to "as often as someone wants to check for/install new rules".

> Does this make sense? Would this improve effectiveness? How could such
> rules by dynamically "inserted" into a running SpamAssassin process (eg
> spamd or amavis)?

use sa-update.

-- 
Randomly Selected Tagline:
"Cloning and the reprogramming of DNA is the first serious step in 
 becoming one with God."- Scientist G. Richard Seed


pgpUzJXK7kowV.pgp
Description: PGP signature

Rule update over DNS?

[Matthias Leisi]

For certain kinds of spam, it would be advantageous to have a highly
dynamic set of rules (eg stock spams). The usual methods (à la sa-update)
are usually slow - slow as in "once or twice a day"; however I think it
would make sense to have them fast - fast as in "continuously updated".

As such, DNS could be used as a transport mechanism with reasonably chosen
TTLs. As most rules are not that huge, they would usually fit into a
single TXT record. Updating these rules through DNS would allow efficient
"flood fill" distribution combined with DNS' cacheing characteristics.

A number of formats for querying are possible; maybe it could look
something like:

type.my_fancy_rule._sa.example.com  IN TXT "header"
rule.my_fancy_rule._sa.example.com  IN TXT "Subject =~ /foo/i"
score.my_fancy_rule._sa.example.com IN TXT "0.947"
desc.my_fancy_rule._sa.example.com  IN TXT "Match foo in the subject"
flags.my_fancy_rule._sa.example.com IN TXT "nice"

Does this make sense? Would this improve effectiveness? How could such
rules by dynamically "inserted" into a running SpamAssassin process (eg
spamd or amavis)?

-- Matthias

Re: Anyon eelse hit errors with the SARE stock rule update?

[Nigel Frankcom]

On Fri, 22 Sep 2006 12:07:22 +0200, Matthias Haegele
<[EMAIL PROTECTED]> wrote:

>Nigel Frankcom schrieb:
>> Hi,
>> 
>> I got this error today...
>> 
>>> ***WARNING***: spamassassin --lint failed.
>>> Rolling configuration files back, not restarting SpamAssassin.
>>> Rollback command is:  mv -f /etc/mail/spamassassin/70_sare_stocks.cf 
>>> /etc/mail/spamassassin/RulesDuJour/70_sare_stocks.cf.2; mv -f 
>>> /etc/mail/spamassassin/RulesDuJour/70_sare_stocks.cf.20060922-1042 
>>> /etc/mail/spamassassin/70_sare_stocks.cf;
>>>
>>> Lint output: [6533] warn: config: invalid regexp for rule SARE_MLB_Stock6: 
>>> /(?:(E\.GL\.y)|(Eg \|_ y)|(e g \| 
>>> y)|(egly)|.P.\s+.P.\s+.?\s+.T.\s+.L.|.P.\s+.P.\s+.T.\s+.L.|A B S Y|A D\s+Y 
>>> E|A G.A-O|A M S N|A$ \s*[Tt]\s*[Ll\|]|\(PPT\|_\)|\(pptl\)|n.s.?l.t|\|\\| 
>>> .~. S .~. \|_ .~. T|_N S L T_|__ \|\\| S L T|`P...`P...`T...`L|cgdc|e g !_ 
>>> y|f.?c.?y.?i|hlun|r . t .$describe SARE_MLB_Stock6 ML obfuscated ticker 
>>> symbols: missing or invalid delimiters
>>> [6533] warn: config: warning: description exists for non-existent rule 
>>> SARE_MLB_Stock6
>>> [6533] warn: config: warning: score set for non-existent rule 
>>> SARE_MLB_Stock6
>>> [6533] warn: lint: 3 issues detected, please rerun with debug enabled for 
>>> more information
>> 
>> 
>> Anyone else seeing it?
>
>Me too ...
>As a workaround i disabled #SARE_STOCKS in config,
>think it will be fixed soon?
>
Since it rolled back I'm not too worried, and I'd expect it'll get
fixed up pretty soon. The SARE bunch are pretty switched on.

Re: Anyon eelse hit errors with the SARE stock rule update?

[Matthias Haegele]

Nigel Frankcom schrieb:

Hi,

I got this error today...


***WARNING***: spamassassin --lint failed.
Rolling configuration files back, not restarting SpamAssassin.
Rollback command is:  mv -f /etc/mail/spamassassin/70_sare_stocks.cf 
/etc/mail/spamassassin/RulesDuJour/70_sare_stocks.cf.2; mv -f 
/etc/mail/spamassassin/RulesDuJour/70_sare_stocks.cf.20060922-1042 
/etc/mail/spamassassin/70_sare_stocks.cf;

Lint output: [6533] warn: config: invalid regexp for rule SARE_MLB_Stock6: 
/(?:(E\.GL\.y)|(Eg \|_ y)|(e g \| 
y)|(egly)|.P.\s+.P.\s+.?\s+.T.\s+.L.|.P.\s+.P.\s+.T.\s+.L.|A B S Y|A D\s+Y E|A 
G.A-O|A M S N|A$ \s*[Tt]\s*[Ll\|]|\(PPT\|_\)|\(pptl\)|n.s.?l.t|\|\\| .~. S 
.~. \|_ .~. T|_N S L T_|__ \|\\| S L T|`P...`P...`T...`L|cgdc|e g !_ 
y|f.?c.?y.?i|hlun|r . t .$describe SARE_MLB_Stock6 ML obfuscated ticker 
symbols: missing or invalid delimiters
[6533] warn: config: warning: description exists for non-existent rule 
SARE_MLB_Stock6
[6533] warn: config: warning: score set for non-existent rule SARE_MLB_Stock6
[6533] warn: lint: 3 issues detected, please rerun with debug enabled for more 
information



Anyone else seeing it?


Me too ...
As a workaround i disabled #SARE_STOCKS in config,
think it will be fixed soon?



Nigel


Greetings
MH

SA V3.1.4

Anyon eelse hit errors with the SARE stock rule update?

[Nigel Frankcom]

Hi,

I got this error today...

>
>***WARNING***: spamassassin --lint failed.
>Rolling configuration files back, not restarting SpamAssassin.
>Rollback command is:  mv -f /etc/mail/spamassassin/70_sare_stocks.cf 
>/etc/mail/spamassassin/RulesDuJour/70_sare_stocks.cf.2; mv -f 
>/etc/mail/spamassassin/RulesDuJour/70_sare_stocks.cf.20060922-1042 
>/etc/mail/spamassassin/70_sare_stocks.cf;
>
>Lint output: [6533] warn: config: invalid regexp for rule SARE_MLB_Stock6: 
>/(?:(E\.GL\.y)|(Eg \|_ y)|(e g \| 
>y)|(egly)|.P.\s+.P.\s+.?\s+.T.\s+.L.|.P.\s+.P.\s+.T.\s+.L.|A B S Y|A D\s+Y E|A 
>G.A-O|A M S N|A$ \s*[Tt]\s*[Ll\|]|\(PPT\|_\)|\(pptl\)|n.s.?l.t|\|\\| .~. S 
>.~. \|_ .~. T|_N S L T_|__ \|\\| S L T|`P...`P...`T...`L|cgdc|e g !_ 
>y|f.?c.?y.?i|hlun|r . t .$describe SARE_MLB_Stock6 ML obfuscated ticker 
>symbols: missing or invalid delimiters
>[6533] warn: config: warning: description exists for non-existent rule 
>SARE_MLB_Stock6
>[6533] warn: config: warning: score set for non-existent rule SARE_MLB_Stock6
>[6533] warn: lint: 3 issues detected, please rerun with debug enabled for more 
>information


Anyone else seeing it?

Nigel