On Mon, 22 Sep 2014, David Hinkle wrote:
I'm not sure, we're using spamassassin from Ubuntu 12.04. sa-update -V
says sa-update version is svn917659.
The version of SpamAssassin in use would be available via "SpamAssassin
--lint" or by looking at the headers it injects into processed messages.
For example:
Sep 21 11:10:20.018 [25712] dbg: generic: SpamAssassin version 3.4.1-r1567215
If I do a tcpdump of it's outbound DNS queries it seems to be looking
for rules at 2.3.3.updates.spamassassin.org.
That's how it checks for rules updates.
You'd need to look under your local updates directory (e.g.
/var/lib/spamassassin/{SAversion}/) to see what the latest download from
updates_spamassassin_org was to verify whether you were getting updates
successfully.
Here's what you can do to manually grab a copy of the latest rules:
jhardin@davinci ~/develop/spamassassin/sa-updates $ dig +short TXT
0.4.3.updates.spamassassin.org
2.3.3.updates.spamassassin.org.
"1626540"
jhardin@davinci ~/develop/spamassassin/sa-updates $ mkdir 1626540
jhardin@davinci ~/develop/spamassassin/sa-updates $ wget
http://buildbot.spamassassin.org/updatestage/1626540.tar.gz
--2014-09-22 19:26:08--
http://buildbot.spamassassin.org/updatestage/1626540.tar.gz
Connecting to 10.x.x.x:3128... connected.
Proxy request sent, awaiting response... 200 OK
Length: 252920 (247K) [application/x-gzip]
Saving to: ‘1626540.tar.gz’
100%[==================================>] 252,920 --.-K/s in 0.1s
2014-09-22 19:26:08 (2.15 MB/s) - ‘1626540.tar.gz’ saved [252920/252920]
jhardin@davinci ~/develop/spamassassin/sa-updates $ cd 1626540
jhardin@davinci ~/develop/spamassassin/sa-updates/1626540 $ tar zxvf ../1626540.tar.gz
{list of rules files extracted}
The 72_active.cf file in that set is the current published non-base rules.
Is there a SVN of the ruleset some where that I could review to see what
kind of changes are happening?
Not really. 72_active.cf isn't committed so you can't really follow the
history of it directly.
For a high-level view you can review the masscheck status page here:
http://ruleqa.spamassassin.org/
You can also follow the masscheck scores updates here:
https://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?view=log
Non-zero scores in that are active rules. If ther were enough messages in
the corpora that the scores get updated, a rules update goes out. (Can you
confirm that's right, KAM? I may be misremembering...)
The commit log for it has a reference to the revision that was the latest
included in that scoring run.
The history of base rules is here:
https://svn.apache.org/viewvc/spamassassin/trunk/rules/
The history of developers' test rules is here:
https://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/
You'd first find where the rule you're interested in lives, then check the
state of that file in the most-recent revision on or prior to the revision
that was included in the scoring run.
Are the rules from 3.4 different than 3.3? Maybe 3.3 isn't being
updated regularly anymore?
3.3 and 3.4 are being updated as regularly as possible based on masscheck
corpora size. There is not yet a distinction between updates for 3.3 and
3.4
On Mon, Sep 22, 2014 at 7:44 PM, Kevin A. McGrail <[email protected]> wrote:
On 9/22/2014 8:29 PM, David Hinkle wrote:
We're having a lot of spam problems right now, and some of my staff are
complaining that we're not getting rules updates. I'd like to figure out
what frequency the rule sets are getting updated. Are they checked into
a
repository some where? In particular, I'd like to know if it's just our
version that's not getting updates or if it's all versions, and I'd just
like to review the changes to evaluate the health of the project in
general.
The rules are updated nightly
I checked the cron logs (which likely I am one of the few people getting)
and there has been a rule update every day in September. I didn't check
farther back.
You might find adding a ruleset like my KAM.cf will help.
What version of SA are you using?
Regards,
KAM
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] FALaholic #11174 pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
A superior gunman is one who uses his superior judgment to keep
himself out of situations that would require the use of his
superior skills.
-----------------------------------------------------------------------
844 days since the first successful private support mission to ISS (SpaceX)
