On Tue, 1 Dec 2015, Filippo Carletti wrote:
You need to run sa-update once to get the current rules before disconnecting
from the Internet.
Exactly.
Real world scenario:
1. install new system with spamassassin in the afternoon in the office
2. verify everything it's working, SA runs with default rules from /usr/share
Where did those default rules come from? SA *does not ship* with rules in
the install set.
(Note: a packager may add a static rules snapshot to the standard SA
install set; this might have been done by whoever packaged up the RPM.)
3. change ip address to match customer network, leave system on
4. during the night, sa-update runs, leave rules dir empty
5. next morning, shutdown system and drive to client office
6. boot system, verify it works in customer lan
7. spamd or amavisd will not run
I could workaround the problem, but I'm interested in opinions about a
patch to sa-update.
Are you saying that running sa-update without network access *deletes*
existing rules? It's still not clear if that's what you're reporting. If
that's the case, yes, that's definitely a bug.
@Kevin, I'm using rpm packages.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] FALaholic #11174 pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Rights can only ever be individual, which means that you cannot
gain a right by joining a mob, no matter how shiny the issued
badges are, or how many of your neighbors are part of it. -- Marko
-----------------------------------------------------------------------
14 days until Bill of Rights day
