Mailing List Archive: SpamAssassin: users

sought rules

Index | Next | Previous | View Threaded

jpff at codemist

Nov 10, 2009, 11:59 PM

Post #1 of 15 (1413 views)
Permalink

sought rules

Have I missed something? I used to pull the sought rules daily, but
nothing seems to have changed since 2 Nov. Is that expected behaviour?
==John ffitch

Bowie_Bailey at BUC

Nov 11, 2009, 6:04 AM

Post #2 of 15 (1363 views)
Permalink

Re: sought rules [In reply to]

john ffitch wrote:
> Have I missed something? I used to pull the sought rules daily, but
> nothing seems to have changed since 2 Nov. Is that expected behaviour?
> ==John ffitch
>

No, that's not expected behavior...

On Thu, 5 Nov 2009, Justin Mason wrote:
> Right now, SOUGHT appears to be broken. I need to get to where the
server is currently and fix it -- I don't have remote login to it at the
mo :(

And that's about all we know at the moment.

--
Bowie

jm at jmason

Nov 11, 2009, 7:29 AM

Post #3 of 15 (1364 views)
Permalink

Re: sought rules [In reply to]

On Wed, Nov 11, 2009 at 14:04, Bowie Bailey <Bowie_Bailey [at] buc> wrote:
> john ffitch wrote:
>> Have I missed something? I used to pull the sought rules daily, but
>> nothing seems to have changed since 2 Nov. Is that expected behaviour?
>> ==John ffitch
>>
>
> No, that's not expected behavior...
>
> On Thu, 5 Nov 2009, Justin Mason wrote:
>> Right now, SOUGHT appears to be broken. I need to get to where the
> server is currently and fix it -- I don't have remote login to it at the
> mo :(
>
> And that's about all we know at the moment.

Yep -- sorry -- I got to reboot the server, but it appears to have not
fixed the problem.
Right now I'm not likely to be able to perform more investigation for a week
or two. :(

Sorry about this -- the perils of volunteer infrastructure!

--
--j.

Bowie_Bailey at BUC

Nov 11, 2009, 7:47 AM

Post #4 of 15 (1357 views)
Permalink

Re: sought rules [In reply to]

Justin Mason wrote:
> Yep -- sorry -- I got to reboot the server, but it appears to have not
> fixed the problem.
> Right now I'm not likely to be able to perform more investigation for a week
> or two. :(
>
> Sorry about this -- the perils of volunteer infrastructure!

No problem. I've set scores for all the JM_SOUGHT* rules to zero until
I start seeing updates again.

--
Bowie

mysqlstudent at gmail

Nov 11, 2009, 9:09 AM

Post #5 of 15 (1351 views)
Permalink

Re: sought rules [In reply to]

Hi,

> Yep -- sorry -- I got to reboot the server, but it appears to have not
> fixed the problem.
> Right now I'm not likely to be able to perform more investigation for a week
> or two. :(
>
> Sorry about this -- the perils of volunteer infrastructure!

Where is it physically located? Isn't there someone in the area that
you trust, or could trust, to go and fix it? I guess if there was, you
would have done that, but I'm sure you could find some volunteers to
put it up in a more centrally-located or managed location for the
future, if you'd like.

Off-site backup? At the least, I'm sure someone could contribute
there. I've got a few servers, and would be happy to provide remote
ssh/rsync access to someone, should you like.

Best regards,
Alex

georgek at netwrx1

Nov 11, 2009, 10:37 AM

Post #6 of 15 (1357 views)
Permalink

Re: sought rules [In reply to]

>On Wed, 11 Nov 2009 12:09:09 -0500, you wrote:

>Hi,
>
>> Yep -- sorry -- I got to reboot the server, but it appears to have not
>> fixed the problem.
>> Right now I'm not likely to be able to perform more investigation for a week
>> or two. :(
>>
>> Sorry about this -- the perils of volunteer infrastructure!
>
>Where is it physically located? Isn't there someone in the area that
>you trust, or could trust, to go and fix it? I guess if there was, you
>would have done that, but I'm sure you could find some volunteers to
>put it up in a more centrally-located or managed location for the
>future, if you'd like.
>
>Off-site backup? At the least, I'm sure someone could contribute
>there. I've got a few servers, and would be happy to provide remote
>ssh/rsync access to someone, should you like.

True....what do you need to host this thing....if I can help out with
space/bandwidth I'd be willing. I've got a couple linux boxes here
that I could give you some space on.

George
--
===[George R. Kasica]=== +1 262 677 0766
President +1 206 374 6482 FAX
Netwrx Consulting Inc. Jackson, WI USA
http://www.netwrx1.com
georgek [at] netwrx1
ICQ #12862186

jm at jmason

Nov 11, 2009, 2:45 PM

Post #7 of 15 (1347 views)
Permalink

Re: sought rules [In reply to]

Hi guys --

the problem is that SOUGHT uses gigabytes of private mail, so running
that on a shared host is not viable. Currently we don't have anything
like that I can use :(

On Wednesday, November 11, 2009, George R. Kasica <georgek [at] netwrx1> wrote:
>>On Wed, 11 Nov 2009 12:09:09 -0500, you wrote:
>
>>Hi,
>>
>>> Yep -- sorry -- I got to reboot the server, but it appears to have not
>>> fixed the problem.
>>> Right now I'm not likely to be able to perform more investigation for a week
>>> or two. :(
>>>
>>> Sorry about this -- the perils of volunteer infrastructure!
>>
>>Where is it physically located? Isn't there someone in the area that
>>you trust, or could trust, to go and fix it? I guess if there was, you
>>would have done that, but I'm sure you could find some volunteers to
>>put it up in a more centrally-located or managed location for the
>>future, if you'd like.
>>
>>Off-site backup? At the least, I'm sure someone could contribute
>>there. I've got a few servers, and would be happy to provide remote
>>ssh/rsync access to someone, should you like.
>
> True....what do you need to host this thing....if I can help out with
> space/bandwidth I'd be willing. I've got a couple linux boxes here
> that I could give you some space on.
>
> George
> --
> ===[George R. Kasica]=== +1 262 677 0766
> President +1 206 374 6482 FAX
> Netwrx Consulting Inc. Jackson, WI USA
> http://www.netwrx1.com
> georgek [at] netwrx1
> ICQ #12862186
>
>

--
--j.

kremels at kreme

Nov 11, 2009, 5:55 PM

Post #8 of 15 (1343 views)
Permalink

Re: sought rules [In reply to]

On 11-Nov-2009, at 11:37, George R. Kasica wrote:
> True....what do you need to host this thing....if I can help out with
> space/bandwidth I'd be willing. I've got a couple linux boxes here
> that I could give you some space on.

I've got a pretty solid business-cable connection at home and my server is up pretty much 24/7/365, depending on bandwidth I could donate some. (I've got about 3Mb up)

--
"But you read a lot of books, I'm thinking. Hard to have faith,
ain't it, when you've read too many books?"

jp at saucer

Nov 14, 2009, 4:34 AM

Post #9 of 15 (1293 views)
Permalink

Re: sought rules [In reply to]

Post your server and bandwidth requirements here. I'm sure many of us
would have the datacenter space and capacity to host a redundant backup.

On Wed, Nov 11, 2009 at 03:29:07PM +0000, Justin Mason wrote:
> On Wed, Nov 11, 2009 at 14:04, Bowie Bailey <Bowie_Bailey [at] buc> wrote:
> > john ffitch wrote:
> >> Have I missed something? �I used to pull the sought rules daily, but
> >> nothing seems to have changed since 2 Nov. �Is that expected behaviour?
> >> ==John ffitch
> >>
> >
> > No, that's not expected behavior...
> >
> > On Thu, 5 Nov 2009, Justin Mason wrote:
> >> Right now, SOUGHT appears to be broken. �I need to get to where the
> > server is currently and fix it -- I don't have remote login to it at the
> > mo :(
> >
> > And that's about all we know at the moment.
>
> Yep -- sorry -- I got to reboot the server, but it appears to have not
> fixed the problem.
> Right now I'm not likely to be able to perform more investigation for a week
> or two. :(
>
> Sorry about this -- the perils of volunteer infrastructure!
>
> --
> --j.

--
/*
Jason Philbrook | Midcoast Internet Solutions - Wireless and DSL
KB1IOJ | Broadband Internet Access, Dialup, and Hosting
http://f64.nu/ | for Midcoast Maine http://www.midcoast.com/
*/

cgregory at hwcn

Nov 14, 2009, 6:43 AM

Post #10 of 15 (1295 views)
Permalink

Re: sought rules [In reply to]

On Sat, 14 Nov 2009, jp wrote:
> Post your server and bandwidth requirements here. I'm sure many of us
> would have the datacenter space and capacity to host a redundant backup.

It's wonderful to see so many people offer 'mirror' space, but as I
understand things, the issue is not with delivery/download of the rules,
but with the regeneration program/process. And I believe the maintainer
already stated that the issue there is with the security of the ham
corpus he uses to regenerate the rules. It makes the server restricted for
access for repair, and precludes the possibility of the regeneration
process itself being mirrored....

So we're just going to have to wait patiently. :)

- Charles

jm at jmason

Dec 2, 2009, 1:32 AM

Post #11 of 15 (984 views)
Permalink

Re: sought rules [In reply to]

Hi all -

I'm afraid the sought rules, and generally most of my time to work on
SA, is still on a bit of a hiatus due to circumstances out of my
control :(

unfortunately my house renovation is taking longer than planned, and
my net access outside work, at the moment, consists of an iPhone!

Working on anything this way is not particularly practical...

On Wednesday, December 2, 2009, Bob Proulx <bob [at] proulx> wrote:
> Hi Justin,
>
>> Right now I'm not likely to be able to perform more investigation for a week
>> or two. :(
>
> Any word on your sought rules? They were working so well for me that
> I miss them now that they aren't getting updated! Good stuff.
>
>> Sorry about this -- the perils of volunteer infrastructure!
>
> I don't want to be annoying or be a trouble maker. I just became
> impatient and decided I would ask about them! :-)
>
> Thanks!
> Bob
>
>

--
--j.

bob at proulx

Dec 2, 2009, 11:08 PM

Post #12 of 15 (960 views)
Permalink

Re: sought rules [In reply to]

Justin Mason wrote:
> unfortunately my house renovation is taking longer than planned, and
> my net access outside work, at the moment, consists of an iPhone!

Construction always takes longer than people plan it to take. It is
rather like software in that regard!

> Working on anything this way is not particularly practical...

Don't worry about it further. You have your task queue full already.

Thanks for the update!

Bob

wtogami at gmail

Jun 10, 2011, 6:38 PM

Post #13 of 15 (284 views)
Permalink

Re: Sought rules [In reply to]

On 6/10/2011 3:34 PM, John Hardin wrote:
> On Fri, 10 Jun 2011, Lawrence @ Rogers wrote:
>
>> On 10/06/2011 10:24 PM, Warren Togami Jr. wrote:
>>> On 6/10/2011 2:01 PM, Karsten Bräckelmann wrote:
>>> > > IFF you use the sought channel with SA 3.3.x, you will need the
>>> reorder
>>> > hack to bend the alphabet.
>>>
>>> It is not entirely clear to me, what exactly are you supposed to rename
>>> for the reorder hack? You have to do it every time you sa-update?
>>
>> Would renaming 20_sought_fraud.cf to 99_sought_fraud.cf, putting
>> 20_sought_fraud.cf (from the yelp.org channel) after 72_active.cf (the
>> default and assumed older SA rules) solve this problem?
>
> Or symlinks from your local configs directory to the SOUGHT channel
> directory files. That would probably be easier to not forget about when
> things get fixed.
>

Is Lawrence's suggestion something we can do upstream to fix this problem?

Alternatively, I think it is a mistake for us to ship SOUGHT rules at
all in the standard sa-update channel. That is, unless we plan on
updating the patterns and scores of SOUGHT on a daily basis. I highly
doubt we will do that.

Warren Togami
warren [at] togami

axb.lists at gmail

Jun 11, 2011, 12:38 AM

Post #14 of 15 (284 views)
Permalink

Re: Sought rules [In reply to]

On 2011-06-11 3:38, Warren Togami Jr. wrote:
> On 6/10/2011 3:34 PM, John Hardin wrote:
>> On Fri, 10 Jun 2011, Lawrence @ Rogers wrote:
>>
>>> On 10/06/2011 10:24 PM, Warren Togami Jr. wrote:
>>>> On 6/10/2011 2:01 PM, Karsten Br�ckelmann wrote:
>>>> > > IFF you use the sought channel with SA 3.3.x, you will need the
>>>> reorder
>>>> > hack to bend the alphabet.
>>>>
>>>> It is not entirely clear to me, what exactly are you supposed to rename
>>>> for the reorder hack? You have to do it every time you sa-update?
>>>
>>> Would renaming 20_sought_fraud.cf to 99_sought_fraud.cf, putting
>>> 20_sought_fraud.cf (from the yelp.org channel) after 72_active.cf (the
>>> default and assumed older SA rules) solve this problem?
>>
>> Or symlinks from your local configs directory to the SOUGHT channel
>> directory files. That would probably be easier to not forget about when
>> things get fixed.
>>
>
> Is Lawrence's suggestion something we can do upstream to fix this problem?
>
> Alternatively, I think it is a mistake for us to ship SOUGHT rules at
> all in the standard sa-update channel. That is, unless we plan on
> updating the patterns and scores of SOUGHT on a daily basis. I highly
> doubt we will do that.

Agreed, I'm +1 with removing SOUGHT rules from mainstream sa update
channel. and keep thems separate.

guenther at rudersport

Jun 11, 2011, 2:08 PM

Post #15 of 15 (270 views)
Permalink

Re: Sought rules [In reply to]

On Fri, 2011-06-10 at 15:38 -1000, Warren Togami Jr. wrote:
> > > Would renaming 20_sought_fraud.cf to 99_sought_fraud.cf, putting
> > > 20_sought_fraud.cf (from the yelp.org channel) after 72_active.cf (the
> > > default and assumed older SA rules) solve this problem?

> Is Lawrence's suggestion something we can do upstream to fix this problem?

No. Please carefully re-read all my previous posts. As I already
explained, the names (and numbers) are meaningless in this context,
because they are in different directories.

--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads