On 6/23/2017 11:43 AM, Dave Jones wrote:
Kevin,
I am seeing other mailing list all complain about SA allowing more
spam lately. I really want to get this triaged tomorrow morning when
I finally get time to work on this. What do you recommend? I was
thinking of taking an old 72_scores.cf from March and manually
creating the 3 update files (tar.gz, asc, sha1), testing on my own
servers, then manually updating the TXT records to point to that
version once the mirrors have updated. Then I would disable the DNS
updates.
Does this sound like a solid triage plan to you?
Dave
I think reverting to the last known good version and disabling DNS makes
sense, yes. However, I think it is safer to just copy the last known
good files to a higher digit and update DNS with that new versions. I
think that will be multiple file sets for 3.3, 3.4, trunk, etc. I'm
sorry I can't look right now.
My mother died a few days ago so life is crap for me but I've been
trying to follow things and working on various SA bugs.
Best,
KAM
