Re: SARE and RulesDuJour still relevant

2011-01-17 Thread Benny Pedersen
On Mon, 17 Jan 2011 11:43:16 +0100, Matus UHLAR - fantomas wrote: > On 14.01.11 23:19, Benny Pedersen wrote: >> meta SPF_NICE_PASS (SPF_HELO_PASS && SPF_PASS) > > I don't see any benefit of this rule, do you? it only hits ham here, never spam, so wanted to know if that same in public corpus, in

Re: SARE and RulesDuJour still relevant

2011-01-17 Thread Matus UHLAR - fantomas
> On Fri, 14 Jan 2011 11:04:49 -1000, "Warren Togami Jr." > wrote: > > > Anyone else have effective local rules? Please let me know and I'll put > > > them into the nightly masscheck for testing. On 14.01.11 23:19, Benny Pedersen wrote: > meta SPF_NICE_PASS (SPF_HELO_PASS && SPF_PASS) I don't

Re: SARE and RulesDuJour still relevant

2011-01-15 Thread Warren Togami Jr.
On 01/15/2011 01:36 AM, Ned Slider wrote: In a year of running them locally I've never seen them hit on a ham message. They appear to hit quite well for me because I pre-filter 95%+ of my spam at the smtp level (greylisting, HELO checks, spamhaus etc) so SA only gets to see the difficult to catc

Re: SARE and RulesDuJour still relevant

2011-01-15 Thread Ned Slider
On 15/01/11 01:54, John Hardin wrote: On Fri, 14 Jan 2011, Ned Slider wrote: header NSL_RCVD_HELO_USER Received =~ /helo[= ]user\)/i describe NSL_RCVD_HELO_USER Received from HELO User Might want to combine into a meta rule with existing NSL_RCVD_FROM_USER rule: header NSL_RCVD_FROM_USER Rece

Re: SARE and RulesDuJour still relevant

2011-01-15 Thread Ned Slider
On 15/01/11 00:19, Warren Togami Jr. wrote: On 01/14/2011 01:09 PM, Ned Slider wrote: On 14/01/11 21:04, Warren Togami Jr. wrote: Anyone else have effective local rules? Please let me know and I'll put them into the nightly masscheck for testing. Warren header NSL_RCVD_HELO_USER Received

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread John Hardin
On Fri, 14 Jan 2011, Ned Slider wrote: header NSL_RCVD_HELO_USER Received =~ /helo[= ]user\)/i describeNSL_RCVD_HELO_USER Received from HELO User Might want to combine into a meta rule with existing NSL_RCVD_FROM_USER rule: header NSL_RCVD_FROM_USER

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread John Hardin
On Fri, 14 Jan 2011, Warren Togami Jr. wrote: Anyone else have effective local rules? Please let me know and I'll put them into the nightly masscheck for testing. I need to put in my postcard rules... -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.o

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Warren Togami Jr.
On 01/14/2011 01:09 PM, Ned Slider wrote: On 14/01/11 21:04, Warren Togami Jr. wrote: Anyone else have effective local rules? Please let me know and I'll put them into the nightly masscheck for testing. Warren header NSL_RCVD_HELO_USER Received =~ /helo[= ]user\)/i describe NSL_RCVD_HELO_U

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Ned Slider
On 14/01/11 21:04, Warren Togami Jr. wrote: Anyone else have effective local rules? Please let me know and I'll put them into the nightly masscheck for testing. Warren header NSL_RCVD_HELO_USER Received =~ /helo[= ]user\)/i describeNSL_RCVD_HELO_USER Recei

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Benny Pedersen
On Fri, 14 Jan 2011 11:04:49 -1000, "Warren Togami Jr." wrote: > Anyone else have effective local rules? Please let me know and I'll put > them into the nightly masscheck for testing. meta SPF_NICE_PASS (SPF_HELO_PASS && SPF_PASS)

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Warren Togami Jr.
On 1/14/2011 2:28 AM, James Lay wrote: Hey All! Been a while since I did a full blown install of SpamAssassin, and as I'm looking at my old setup, I see a fair amount of changes. I have the SARE rules as well as RulesDuJour running, but noticed that on a fresh install of SA, after doing

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread James Lay
On 1/14/11 6:38 AM, "Jason Bertoch" wrote: >On 2011/01/14 7:28 AM, James Lay wrote: >> Hey All! >> >> Been a while since I did a full blown install of SpamAssassin, and as >> I'm looking at my old setup, I see a fair amount of changes. I have the &g

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Matus UHLAR - fantomas
> On 01/14/2011 01:28 PM, James Lay wrote: >> Been a while since I did a full blown install of SpamAssassin, and as >> I'm looking at my old setup, I see a fair amount of changes. I have >> the SARE rules as well as RulesDuJour running, but noticed that on a >> fre

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Jason Bertoch
On 2011/01/14 7:28 AM, James Lay wrote: Hey All! Been a while since I did a full blown install of SpamAssassin, and as I'm looking at my old setup, I see a fair amount of changes. I have the SARE rules as well as RulesDuJour running, but noticed that on a fresh install of SA, after doing

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Kai Schaetzl
This is getting asked about every week :-) Short answer: no, not relevant anymore, don't use. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Bernard Lheureux
On 01/14/2011 01:28 PM, James Lay wrote: Hey All! Been a while since I did a full blown install of SpamAssassin, and as I'm looking at my old setup, I see a fair amount of changes. I have the SARE rules as well as RulesDuJour running, but noticed that on a fresh install of SA, after doi

SARE and RulesDuJour still relevant

2011-01-14 Thread James Lay
Hey All! Been a while since I did a full blown install of SpamAssassin, and as I'm looking at my old setup, I see a fair amount of changes. I have the SARE rules as well as RulesDuJour running, but noticed that on a fresh install of SA, after doing an sa-update, there are very few rules

Re: RulesDuJour

2009-06-30 Thread Matus UHLAR - fantomas
> Anshul Chauhan wrote: > > we have to copy KAM.cf to /usr/share/spamassassin only for its > > integration with spamassassin or something else is to done > > > > I'm using spamassassin-3.2.5-1.el4.rf on Centos4.7 On 30.06.09 02:11, Matt Kettler wrote: > Any add-on rules should be placed in the sa

Re: RulesDuJour

2009-06-29 Thread Matt Kettler
Anshul Chauhan wrote: > we have to copy KAM.cf to /usr/share/spamassassin only for its > integration with spamassassin or something else is to done > > I'm using spamassassin-3.2.5-1.el4.rf on Centos4.7 Any add-on rules should be placed in the same directory as your local.cf (ie: /etc/mail/spamas

Re: RulesDuJour

2009-06-29 Thread Anshul Chauhan
leep." On Sat, Jun 27, 2009 at 2:39 AM, Gerry Maddock wrote: > "R > > I'm new to the list, and haven't been working with Spamassasin for > > long (about 1 year). It worked fine filtering spam, but now more and > > more are getting through. I found someth

Re: RulesDuJour

2009-06-28 Thread Matus UHLAR - fantomas
On 26.06.09 23:05, Roland Klein Overmeer wrote: > I'm new to the list, and haven't been working with Spamassasin for long > (about 1 year). It worked fine filtering spam, but now more and more are > getting through. I found something called RulesDuJour on the net, but it >

Re: RulesDuJour

2009-06-26 Thread Gerry Maddock
"R > I'm new to the list, and haven't been working with Spamassasin for > long (about 1 year). It worked fine filtering spam, but now more and > more are getting through. I found something called RulesDuJour on > the net, but it seems it's not being updated anymore

RulesDuJour

2009-06-26 Thread Roland Klein Overmeer
Hi All, I'm new to the list, and haven't been working with Spamassasin for long (about 1 year). It worked fine filtering spam, but now more and more are getting through. I found something called RulesDuJour on the net, but it seems it's not being updated anymore. Is it usefull

Re: RulesDuJour & Tripwire Issue

2008-08-28 Thread Andy Sutton
On Wed, 2008-08-27 at 23:05 -0500, Curtis LaMasters wrote: > @Andy - I was able to parse the script that you sent me to which had > neither my problem nor my solution Actually it DID contain your problem AND the solution: # Version 1.31 NOTICE! Rules du jour is no longer being maintained. As the

Re: RulesDuJour & Tripwire Issue

2008-08-27 Thread Curtis LaMasters
88_FVGT_Tripwire.cf. @Matt - Thank you, you were correct. The download link was incorrect. I believe my using rulesdujour stemmed from me using outdated setup documents. I'll put some effort into researching that. Thanks, Curtis LaMasters http://www.curtis-lamasters.com http://www.builtnetworks.com

Re: RulesDuJour & Tripwire Issue

2008-08-27 Thread Matt Kettler
Curtis LaMasters wrote: > Now on to my next issue. Thank you Dan for helping me with the last > one. I have RulesDuJour updating (probably too often) but I'm getting > the following error. I've been able to find the issue on Google but > no resolution. Hoping you can h

RulesDuJour & Tripwire Issue

2008-08-27 Thread Curtis LaMasters
Now on to my next issue. Thank you Dan for helping me with the last one. I have RulesDuJour updating (probably too often) but I'm getting the following error. I've been able to find the issue on Google but no resolution. Hoping you can help me figure this out. ***WARNING***: sp

Re: RulesDuJour

2007-09-04 Thread Daryl C. W. O'Shea
[EMAIL PROTECTED] wrote: I was thinking of looking into RulesDuJour as an alternative to sa-update, as there hasn't been anything to update since July, unless one installs yet unreleased versions of SpamAssassin. ("find var -ls" to check.) Why are you so concerned about updates

RE: RulesDuJour

2007-09-04 Thread jidanni
I was thinking of looking into RulesDuJour as an alternative to sa-update, as there hasn't been anything to update since July, unless one installs yet unreleased versions of SpamAssassin. ("find var -ls" to check.) However reading this thread has scared me further. (Shall I ch

RE: RulesDuJour

2007-09-04 Thread Rob Sterenborg
>> The page describes how to select what channels sa-update >> will update. You'll just have an extra sa-update in your >> crontab; one for the official SA rules and one for the SARE rules. >> > > I have only one sa-update in my crontab Yes, sorry, it can be done using 1 sa-update line; I actual

Re: RulesDuJour

2007-09-04 Thread Jari Fredriksson
>> What channels sa-update updates? >> >> And if I use the '--channelfile' what happens? Maybe >> sa-update updates only the channels included in the file >> specifided for the argument '--channelfile' or it adds >> the file listed to the default list of channels >> maintained by sa-update? > >

RE: RulesDuJour

2007-09-04 Thread Rob Sterenborg
Rocco Scappatura wrote: >> But it is. >> >> RulesDuJour delivery is broken, and it gives only HTTP-error page, >> which causes the error. >> >> sa-update can deliver the rules without errors. > > However, I already use sa-update other than RulesDuJ

RE: RulesDuJour

2007-09-04 Thread Rocco Scappatura
> But it is. > > RulesDuJour delivery is broken, and it gives only HTTP-error > page, which causes the error. > > sa-update can deliver the rules without errors. However, I already use sa-update other than RulesDuJour, which is scheduled as follow: 22 14 * * 1,2,3

Re: RulesDuJour

2007-09-03 Thread Jari Fredriksson
>> Using sa-update is the suggested method now: >> >> http://daryl.dostech.ca/sa-update/sare/sare-sa-update-howto.txt > > I don't think that this is related to the error discussed > in this thread. > > rocsca But it is. RulesDuJour delivery is broken, an

RE: RulesDuJour

2007-09-03 Thread Rocco Scappatura
> Using sa-update is the suggested method now: > > http://daryl.dostech.ca/sa-update/sare/sare-sa-update-howto.txt I don't think that this is related to the error discussed in this thread. rocsca

Re: RulesDuJour

2007-09-03 Thread Matthias Haegele
SpamAssassin. Rollback command is: mv -f /etc/mail/spamassassin/tripwire.cf /tmp/RulesDuJour/99_FVGT_Tripwire.cf.2; mv -f /tmp/RulesDuJour/tripwire.cf.20070831-1530 /etc/mail/spamassassin/tripwire.cf; mv -f /etc/mail/spamassassin/70_sare_stocks.cf /tmp/RulesDuJour/70_sare_stocks.cf.2; mv -f /tmp/RulesDuJour

RulesDuJour

2007-09-03 Thread Rocco Scappatura
: mv -f /etc/mail/spamassassin/tripwire.cf /tmp/RulesDuJour/99_FVGT_Tripwire.cf.2; mv -f /tmp/RulesDuJour/tripwire.cf.20070831-1530 /etc/mail/spamassassin/tripwire.cf; mv -f /etc/mail/spamassassin/70_sare_stocks.cf /tmp/RulesDuJour/70_sare_stocks.cf.2; mv -f /tmp/RulesDuJour/70_sare_stocks.cf.20070831

Re: RulesDuJour/deneb.dwf.com: 404 errors

2007-08-02 Thread McDonald, Dan
On Thu, 2007-08-02 at 12:25 -0600, Reg Clemens wrote: > I am getting the following error message from my (daily) update of > SpamAssassin > Rules > > --- > > Subject: RulesDuJour/deneb.dwf.com: 404 errors > > > > The following rules had errors: > SARE 70_

RulesDuJour/deneb.dwf.com: 404 errors

2007-08-02 Thread Reg Clemens
I am getting the following error message from my (daily) update of SpamAssassin Rules --- Subject: RulesDuJour/deneb.dwf.com: 404 errors The following rules had errors: SARE 70_sare_bayes_poison_nxm.cf Ruleset had an unknown error: curl exit code: 52 curl: (52) Empty reply from server 000

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-29 Thread jdow
To: Sent: Thursday, 2007, June 28 15:31 Subject: Re: RulesDuJour lint failed. Updates rolled back. This must be an issue that needs to be raised with Prolexic, as they are doing the DDoS protection for rulesemporium.com. Can anyone reproduce this redirect outside of RDJ, and give me a dump of t

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-28 Thread Lindsay Haisley
On Thu, 2007-06-28 at 18:56 -0500, Lindsay Haisley wrote: > By running a curl hit repeatedly on the RE server I reproduced the > problem. By running this test a couple of times I'm apparently now blocked by RE :-P Oh well . Hope the info I sent was useful. -- Lindsay Haisley | "In an

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-28 Thread Lindsay Haisley
On Thu, 2007-06-28 at 17:31 -0500, Dallas Engelken wrote: > This must be an issue that needs to be raised with Prolexic, as they are > doing the DDoS protection for rulesemporium.com. > > Can anyone reproduce this redirect outside of RDJ, and give me a dump of > the full transaction including ht

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-28 Thread Dallas Engelken
run of rules_du_jour. --- /root/rules_du_jour.orig2007-06-17 21:01:24.0 -0500 +++ /var/lib/spamassassin/rules_du_jour 2007-06-18 12:37:44.0 -0500 @@ -907,6 +907,8 @@ [ "${SEND_THE_EMAIL}" ] && echo -e "${MESSAGES}" | sh

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-28 Thread Lindsay Haisley
- --- /root/rules_du_jour.orig2007-06-17 21:01:24.0 -0500 +++ /var/lib/spamassassin/rules_du_jour 2007-06-18 12:37:44.0 -0500 @@ -907,6 +907,8 @@ [ "${SEND_THE_EMAIL}" ] && echo -e "${MESSAGES}" | sh -c "${MAILCMD} -s \"RulesDuJour Run S

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-28 Thread Nigel Frankcom
>> >Daryl is right, there is no fix due in 3.2.2 - I got the RDJ and the >sa-update errors confused. I guess maybe I should dye my hair blonde. > >Apologies for any confusion I've caused. > Geez - blonde it is - it's sa-compile not sa-update! I wonder if McDonalds have any jobs going :-/ Kind r

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-28 Thread Nigel Frankcom
oof rules. The solutions I've seen don't seem to work >>> for me. I see that my cron job (run nightly) is pulling some HTML >>> source instead of the rules. I?ve tried removing the faulty >>> 70_sare_adult.* from etc/mail/spamassassin/RulesDuJour/ and manually >&

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-27 Thread Daryl C. W. O'Shea
.* from etc/mail/spamassassin/RulesDuJour/ and manually replacing it with the ?actual? file using wget. I?ve even manually updated the used /etc/mail/spamassassin/70_sare_adult.cf to ensure that it was correct. When I us ?wget http://rulesemporium.com/rules/70_sare_adult.cf? to grab the file

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-27 Thread Nigel Frankcom
solutions I've seen don't seem to work >>> for me. I see that my cron job (run nightly) is pulling some HTML >>> source instead of the rules. I?ve tried removing the faulty >>> 70_sare_adult.* from etc/mail/spamassassin/RulesDuJour/ and manually >>> replaci

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-27 Thread Matthias Haegele
adult.* from etc/mail/spamassassin/RulesDuJour/ and manually replacing it with the ?actual? file using wget. I?ve even manually updated the used /etc/mail/spamassassin/70_sare_adult.cf to ensure that it was correct. When I us ?wget http://rulesemporium.com/rules/70_sare_adult.cf? to grab the file

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-27 Thread Nigel Frankcom
;70_sare_adult.* from etc/mail/spamassassin/RulesDuJour/ and manually >replacing it with the ?actual? file using wget. I?ve even manually >updated the used /etc/mail/spamassassin/70_sare_adult.cf to ensure >that it was correct. When I us ?wget >http://rulesemporium.com/rules/70_sare_adul

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-27 Thread Matthias Haegele
David Boltz schrieb: I?ve been getting the lint failures found below on my Rules Du Jour updates for a few weeks now. Yes this would be since the DDoS attacks [RDJ Problems ...] btw: Are there any additional things to know/caveats if i want to use sa-update channels for RDJ: (besides adding t

RulesDuJour lint failed. Updates rolled back.

2007-06-27 Thread David Boltz
. The solutions I've seen don't seem to work for me. I see that my cron job (run nightly) is pulling some HTML source instead of the rules. I?ve tried removing the faulty 70_sare_adult.* from etc/mail/spamassassin/RulesDuJour/ and manually replacing it with the ?actual? file using wget.

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-22 Thread jdow
From: "Phil Barnett" <[EMAIL PROTECTED]> On Friday 22 June 2007 12:32, jdow wrote: Take a quick look at tripwire and its newer equivalent. They should be about the same thing. Loading both will result in the rules that may share a name between the files having the newer version superseded by

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-22 Thread Phil Barnett
On Friday 22 June 2007 12:32, jdow wrote: > Take a quick look at tripwire and its newer equivalent. They should be > about the same thing. Loading both will result in the rules that may share > a name between the files having the newer version superseded by the older > version because files load in

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-22 Thread jdow
From: "Phil Barnett" <[EMAIL PROTECTED]> On Friday 22 June 2007 00:54, jdow wrote: I think it was mentioned around these precincts about the time tripwire was converted to 99_FVGTTripWire.cf and added to the SARE repositories as a SARE rule set. I also note that I don't use it here anymore. The

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Phil Barnett
On Friday 22 June 2007 00:54, jdow wrote: > I think it was mentioned around these precincts about the time tripwire > was converted to 99_FVGTTripWire.cf and added to the SARE repositories > as a SARE rule set. I also note that I don't use it here anymore. The > return on CPU cycles investment was

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread jdow
sr/share/spamassassin/rulesdujour is not, and the next run of RDJ repopulates the former. 2) Why are you running tripwire.cf (obsolete) and 99_FGTTripWire.cf at the same time? When RDJ downloads 99FGTTripWire.cf, it renames it to tripwire.cf when it moves it. I had no idea that tripwire was ob

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Phil Barnett
ther such place. This is a configurable option in SA, so you can put it anywhere you want. Why the people at Plesk decided to put it there is beyond me, but it works, so I'm leaving it alone. Also, /usr/share/spamassassin may be wiped out on each upgrade, but /usr/share/spamassassin/rulesdujour

RE: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Steve Ingraham
> -Original Message- > From: jdow [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 21, 2007 7:50 AM > To: users@spamassassin.apache.org > Subject: Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net > > > Daryl, note that a simple update to RDJ to a

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread jdow
Daryl, note that a simple update to RDJ to add a time gap between individual file update attempts gets through the DDoS protection somewhat better than a raw RDJ. A friend of mine made such a change and has it working better. {^_^} - Original Message - From: "Daryl C. W. O'Shea" <[EMAIL

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread jdow
99_FGTTripWire.cf at the same time? (Note that I do NOT use RulesDuJour here. I have my own script for handling updates. It's a ridiculously simple bash script that I can read. {^_-} So maybe using /usr/share/spamassassin is some form of silly RDJ action. That is a directory that is utterly wipe

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Matthias Haegele
@ -907,6 +907,8 @@ [ "${SEND_THE_EMAIL}" ] && echo -e "${MESSAGES}" | sh -c "${MAILCMD} -s \"RulesDuJour Run Summary on ${HOSTNAME}\" ${MAIL_ADDRESS}"; fi +grep -il 'META HTTP-EQUIV' ${TMPDIR}/*|xargs -n1 rm -f + cd ${OLDDIR}; exit; ---

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Matthias Keller
Phil Barnett wrote: On Thursday 21 June 2007 03:38, Matthias Keller wrote: Just try to delete the downloaded files in your rules_du_jour folder (for example /etc/mail/spamassassin/rules_du_jour/* ), respectively just the rule(s) that go wrong.I then redownloads the rules correctly and you're

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Phil Barnett
On Thursday 21 June 2007 03:38, Matthias Keller wrote: > Just try to delete the downloaded files in your rules_du_jour folder > (for example /etc/mail/spamassassin/rules_du_jour/* ), respectively just > the rule(s) that go wrong.I then redownloads the rules correctly and > you're clear to go with

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Nigel Frankcom
r tripwire.cf updates? >>> >>> I've been getting this message for several days now. >>> >>> It looks to me like the new tripwire.cf is very broken. >>> >>> -- Forwarded Message -- >>> >>> Subject: Rul

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Nigel Frankcom
On Thu, 21 Jun 2007 03:30:00 -0400, "Daryl C. W. O'Shea" <[EMAIL PROTECTED]> wrote: >Nigel Frankcom wrote: > >> I've been getting the same for weeks. I ended up manually updating >> rules; especially the stock one since more and more seem to be >> slipping through. >> >> The problems seemed to st

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Matthias Keller
very broken. -- Forwarded Message -- Subject: RulesDuJour Run Summary on taz5.fiberhosting.net Date: Thursday 21 June 2007 02:26 From: To: RulesDuJour Run Summary on taz5.fiberhosting.net: TripWire has changed on taz5.fiberhosting.net. Version line: ***WARNING***: spamassassin --

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Daryl C. W. O'Shea
Nigel Frankcom wrote: I've been getting the same for weeks. I ended up manually updating rules; especially the stock one since more and more seem to be slipping through. The problems seemed to start after the DDoS on rulesemporium; since then I've not been able to get any sense out of it via RD

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Nigel Frankcom
. > >-- Forwarded Message -- > >Subject: RulesDuJour Run Summary on taz5.fiberhosting.net >Date: Thursday 21 June 2007 02:26 >From: >To: > >RulesDuJour Run Summary on taz5.fiberhosting.net: > >TripWire has changed on taz5.fiberhosting.net. >Versio

Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Phil Barnett
Is anyone else getting these failed messages on their tripwire.cf updates? I've been getting this message for several days now. It looks to me like the new tripwire.cf is very broken. -- Forwarded Message -- Subject: RulesDuJour Run Summary on taz5.fiberhosting.net

Re: [OT] RDJ RulesDuJour Updates dont lint

2007-06-13 Thread Shane Williams
On Wed, 13 Jun 2007, Raymond Dijkxhoorn wrote: coupon1+coupon2+style1+style2;document.cookie="NSC_DOSP="+add+";path=/";window.location=window.location.href;window.focus(); [18730] warn: config: failed to parse line, skipping:

Re: [OT] RDJ RulesDuJour Updates dont lint

2007-06-13 Thread Raymond Dijkxhoorn
Hi! /etc/mail/spamassassin/tripwire.cf; mv -f /etc/mail/spamassassin/blacklist.cf /etc/mail/spamassassin/RulesDuJour/sa-blacklist.current.2; mv -f /etc/mail/spamassassin/RulesDuJour/blacklist.cf.20070613-0836 /etc/mail/spamassassin/blacklist.cf; mv -f coupon1+coupon2+style1+style2

[OT] RDJ RulesDuJour Updates dont lint

2007-06-13 Thread Matthias Haegele
Hello! Any tipps:? ***WARNING***: spamassassin --lint failed. Rolling configuration files back, not restarting SpamAssassin. Rollback command is: mv -f /etc/mail/spamassassin/tripwire.cf /etc/mail/spamassassin/RulesDuJour/99_FVGT_Tripwire.cf.2; mv -f /etc/mail/spamassassin/RulesDuJour

Re: Rulesdujour?

2007-01-26 Thread Justin Mason
Matt Kettler writes: > 2) Antidrug is a part of SA as of SA 3.0.0. If you're using antidrug > with SA 3.0.0 or higher, you're possibly downgrading your antidrug > rules. Unless you're using SA 2.64 or lower, you should remove > antidrug.cf from your system completely. > > 3) If I ever make update

Re: Rulesdujour?

2007-01-25 Thread Matt Kettler
RDJ on this file *NOW* >>> [16404] warn: config: failed to parse line, skipping: Also, make note >>> of the fact that this file is for users of SA 2.64 and below. >>> >> It makes it pretty clear that you should stop using it and why. >> > > Yes

Re: Rulesdujour?

2007-01-25 Thread Gene Heskett
of SA 2.64 and below. >>> >>>It makes it pretty clear that you should stop using it and why. >> >>Yes I did read it, but I'm not sure what rule I should remove, or if I >>should stop using rulesdujour. Has it fallen out of favor or was it >> too goo

Re: Rulesdujour?

2007-01-25 Thread Gene Heskett
that this file is for users of SA 2.64 and below. > >It makes it pretty clear that you should stop using it and why. Yes I did read it, but I'm not sure what rule I should remove, or if I should stop using rulesdujour. Has it fallen out of favor or was it too good for somebody? FWIW,

Re: Rulesdujour?

2007-01-25 Thread Nigel Frankcom
g: STOP using RDJ on this file *NOW* >>> [16404] warn: config: failed to parse line, skipping: Also, make note >>> of the fact that this file is for users of SA 2.64 and below. >> >>It makes it pretty clear that you should stop using it and why. > >Yes I did

Re: Rulesdujour?

2007-01-25 Thread Theo Van Dinter
On Thu, Jan 25, 2007 at 11:50:13AM -0500, Gene Heskett wrote: > I got this email from Rules_Du_Jour this morning, what is the fix? Don't take this the wrong way, but did you read the errors at all? > Lint output: [16404] warn: config: failed to parse line, skipping: README: > [16404] warn: config

Rulesdujour?

2007-01-25 Thread Gene Heskett
/spamassassin/RulesDuJour/antidrug.cf.2; mv -f /etc/mail/spamassassin/RulesDuJour/antidrug.cf.20070125-0559 /etc/mail/spamassassin/antidrug.cf; Lint output: [16404] warn: config: failed to parse line, skipping: README: [16404] warn: config: failed to parse line, skipping: WARNING: YOU HAVE DOWNLOADED

Re: lint test failed after rulesdujour update

2007-01-25 Thread Dimitri Yioulos
.0 running with mailscanner. > >> It updates it self via RulesDuJour on a regular basis and I get an email > >> which informs me of the update. > >> This morning I noticed that there was a error in the process, I received > >> a second email which contai

Re: lint test failed after rulesdujour update

2007-01-25 Thread Matt Kettler
Dimitri Yioulos wrote: > On Thursday 25 January 2007 6:33 am, Michael Connors wrote: > >> Hi, >> I am new to spamassassin so sorry if my question is a bit stupid. >> I have mail spamassassin 3.1.0 running with mailscanner. >> It updates it self via RulesDuJour o

Re: lint test failed after rulesdujour update

2007-01-25 Thread Dimitri Yioulos
On Thursday 25 January 2007 6:33 am, Michael Connors wrote: > Hi, > I am new to spamassassin so sorry if my question is a bit stupid. > I have mail spamassassin 3.1.0 running with mailscanner. > It updates it self via RulesDuJour on a regular basis and I get an email > which in

lint test failed after rulesdujour update

2007-01-25 Thread Michael Connors
Hi, I am new to spamassassin so sorry if my question is a bit stupid. I have mail spamassassin 3.1.0 running with mailscanner. It updates it self via RulesDuJour on a regular basis and I get an email which informs me of the update. This morning I noticed that there was a error in the process, I

Re: RulesDuJour

2006-12-08 Thread LuKreme
On 8-Dec-2006, at 01:46, Mike Kenny wrote: The configuration that I inherited had only got TRUSTED_RULESETS="TRIPWIRE SARE_EVILNUMBERS0 SARE_RANDOM"; in /etc/rulesdujour/config. This obviously allows a lot of spam to filter through (or at elaast would allow the rules to becom

RulesDuJour

2006-12-08 Thread Mike Kenny
The configuration that I inherited had only got TRUSTED_RULESETS="TRIPWIRE SARE_EVILNUMBERS0 SARE_RANDOM"; in /etc/rulesdujour/config. This obviously allows a lot of spam to filter through (or at elaast would allow the rules to become outdated). Looking at rulesdujour.sh I notice it re

Re: RulesDuJour 1.29 - SARE Stocks Ruleset) not found (404)

2006-12-06 Thread Chris Thielen
Sorry about that! It's fixed now and 1.29b is available on the web site. Max Matslofva wrote: Hi RulesDuJour 1.29 tries to fetch 70_sare_stocks.cf from http://www.rulesemporium.com/rules/rules/70_sare_stocks.cf The correct URL for 70_sare_stocks.cf is http://www.rulesemporium.com/

RulesDuJour 1.29 - SARE Stocks Ruleset) not found (404)

2006-12-05 Thread Max Matslofva
Hi RulesDuJour 1.29 tries to fetch 70_sare_stocks.cf from http://www.rulesemporium.com/rules/rules/70_sare_stocks.cf The correct URL for 70_sare_stocks.cf is http://www.rulesemporium.com/rules/70_sare_stocks.cf See patch below /Max --- rules_du_jour Wed Dec 6 08:45:55 2006

Re: Rulesdujour is broken?

2006-11-10 Thread Daryl C. W. O'Shea
Ernie Dunbar wrote: In another thread, I noticed that someone had a SARE ruleset for stock scams and the like. Since they had been plaguing us constantly in recent months, I decided I should get rules_du_jour to update that ruleset for us. I quickly found out that rules_du_jour was horribly out

Rulesdujour is broken?

2006-11-10 Thread Ernie Dunbar
In another thread, I noticed that someone had a SARE ruleset for stock scams and the like. Since they had been plaguing us constantly in recent months, I decided I should get rules_du_jour to update that ruleset for us. I quickly found out that rules_du_jour was horribly out of date on our system,

R: RulesduJour How often is too often?

2006-11-02 Thread Giampaolo Tomassoni
> I have it set to go about about every six hours yet blacklist_uri always > seems to have an update. Is there any reason I couldn't up it to like > every four hours? Would that stress the rules servers a bit too much? > > How often does everyone else update? /ME: Once per day. Also note tha

RE: RulesduJour How often is too often?

2006-11-02 Thread Josh Graham
Oops, I musta missed that part. Hmm.. Maybe I could make a copy of dujour that just looked for updates to blacklist_uri. -Original Message- From: Evan Platt [mailto:[EMAIL PROTECTED] Sent: Thursday, November 02, 2006 7:44 AM To: users@spamassassin.apache.org Subject: Re: RulesduJour

Re: RulesduJour How often is too often?

2006-11-02 Thread Evan Platt
At 07:38 AM 11/2/2006, you wrote: I have it set to go about about every six hours yet blacklist_uri always seems to have an update. Is there any reason I couldn't up it to like every four hours? Would that stress the rules servers a bit too much? How often does everyone else update? Well con

RulesduJour How often is too often?

2006-11-02 Thread Josh Graham
I have it set to go about about every six hours yet blacklist_uri always seems to have an update. Is there any reason I couldn't up it to like every four hours? Would that stress the rules servers a bit too much? How often does everyone else update?

What has happened to RulesDuJour?

2006-10-31 Thread Robert S
If I go to the RulesDuJour site (http://www.exit0.us/index.php?pagename=RulesDuJour), I get: Object not found! The requested URL was not found on this server. The link on the referring page seems to be wrong or outdated. Please inform the author of that page about the error. If you think

Re: problem in updating the spam database with rulesdujour

2006-10-30 Thread ankush grover
Have you checked your cron like the error suggests? Seems you are flooding the servers. How often is rdj ran? Have you 'tested' a lot? -- hey, Actullay other admin set the wrong crontab . Yes the script has ran atleast 5 times a day before I posted this problem I have disable the script for 1

Re: problem in updating the spam database with rulesdujour

2006-10-30 Thread Vidar Tyldum Hansen
ankush grover, 30.10.2006 13:04: > hey friends, > > I am using spamassassin 3.1.3 on Fc3 along with postfix + > mailscanner. I have configured rulesdujour to download latest spam > rules. When I tried to ran the rulesdujour script I got the following > errors at the end. &

problem in updating the spam database with rulesdujour

2006-10-30 Thread ankush grover
hey friends, I am using spamassassin 3.1.3 on Fc3 along with postfix + mailscanner. I have configured rulesdujour to download latest spam rules. When I tried to ran the rulesdujour script I got the following errors at the end. Lint output: [6769] warn: config: failed to parse line, skipping

RE: sa-update versus rulesdujour questions

2006-10-20 Thread Bowie Bailey
Bret Miller wrote: > > Theo Van Dinter wrote: > > > FWIW, it happens to be the "official" tool since no one ever > > > submitted RDJ to be the official tool, so we had to write our own. > > > > > I would have offered, had I known there was any interest. > > > > Chris T. > > > I'm glad it isn't

RE: sa-update versus rulesdujour questions

2006-10-20 Thread Bret Miller
> Theo Van Dinter wrote: > > FWIW, it happens to be the "official" tool since no one > ever submitted > > RDJ to be the official tool, so we had to write our own. > > > I would have offered, had I known there was any interest. > > Chris T. I'm glad it isn't the official tool since it doesn't run

  1   2   3   >