ZMI_GERMAN and using ifplugin: diskussion

2006-06-24 Thread Michael Monnerie
Dear users,

I am getting reports that the ifplugin statements in the ZMI_GERMAN 
ruleset are making lint errors for SA version 2.64, so some people 
seem to use such an old version.

Currently the only use of ifplugin is to find an attachment namen 
ebay-rechnung.pdf.zip, which contains a virus. Of course I could delete 
that single rule, or use the FULL check (which is not good to use). But 
I would prefer a straight line for the ruleset.

I'd like to hear response from you, the users, if I
a) should use new features to provide all possible scans for SPAM
b) skip some tests but be compatible with older versions of SA

I would prefer a) and create an extra ZMI_GERMAN_PRE3, but I don't have 
the time nor will to manually delete offending lines all the times, or 
to write a script to automatically do that. Are any SARE script writers 
having some scripts?

mfg zmi
-- 
// Michael Monnerie, Ing.BSc-  http://it-management.at
// Tel: 0660/4156531  .network.your.ideas.
// PGP Key:curl -s http://zmi.at/zmi3.asc | gpg --import
// Fingerprint: 44A3 C1EC B71E C71A B4C2  9AA6 C818 847C 55CB A4EE
// Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE


pgpueu1vqaWqq.pgp
Description: PGP signature


Re: ZMI_GERMAN and using ifplugin: diskussion

2006-06-24 Thread Loren Wilton
We unfortunately don't have any scripts to deal with version differences.
Our technique has been to make two (or more) versions of a file, typically a
less aggressive version for 2.6x and older, and one using new features for
the newer releases.  Its a shame that there is no if clause that is usable
back in 2.6x, but...

Since it seems that your only problem at the moment is ifplugin lines (I
assume around tests that would fail with a missing plugin) you could
trivially make two versions of your rules.  Make the current version by hand
as you do currently.  Then run a trivial script that will look for the
ifplugin groups and create a new file, deleting the lines in the plugin
clause.

This gives you two versions on the server with no real effort on your part
(once you write the stripping script).  Then the only effort is publishing
the fact that there is zmi_german and zmi_german26x, and telling people to
pick the right file for their version.

Loren