Re: Tons of errors in todays masscheck

> rsync -Pcqz ham-jarif.log spam-jarif.log *munged*/ > 11:10:06 up 1:09, 0 users, load average: 11.64, 14.16, 14.13 > -- Kevin A. McGrail VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171

Fwd: [Bug 7647] New: syntax errors in todays sa-update

??? Forwarded Message Subject:[Bug 7647] New: syntax errors in todays sa-update Date: Mon, 22 Oct 2018 10:49:54 + From: bugzilla-dae...@bugzilla.spamassassin.org To: d...@spamassassin.apache.org https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7647

Fwd: repeated sa-update problems

FYI Forwarded Message Subject:Re: repeated sa-update problems Date: Mon, 8 Oct 2018 16:43:42 +0200 From: Matus UHLAR - fantomas To: us...@spamassassin.apache.org >On 20.09.18 16:05, Matus UHLAR - fantomas wrote: >>I looked at update times and they are

Re: Masscheck reuse

Might want to put this on the wiki too! Adding SASA group too for their input. -- Kevin A. McGrail VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On Thu, Oct 4, 2018 at 10:28 AM Henrik K wrote

Re: Nightly Mass Check results page not available in https

story but I suspect that will be > changing here over the next year. If it's for spamassassin.org domain, you can likely do it yourself. -- Kevin A. McGrail VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171

Re: Nightly Mass Check results page not available in https

no on has any > objections. I don't think you'll be able to approve it.  1) Ask infra for the public and private for the *.apache.org cert which I could see they might not want to give 2) Coordinate a free letsencrypt cert with infra 3) ?? I'm happy to pay the $20 for a RapidSSL cert if that helps

Re: slow ruleqa?

On 9/18/2018 2:26 AM, Henrik Krohns wrote: > Could someone install Compress::LZ4 to sa-vm1 please. :-) Dave, I'll defer to you but tell me if you want me to handle it.  I don't know if there is a simple package or cpan, etc. -- Kevin A. McGrail VP Fundraising, Apache Software Foundation Ch

Re: Masscheck reuse

mply running the messages through a dedicated spamd as soon as possible > to add the headers. > > Cheers, > Henrik -- Kevin A. McGrail VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171

FOUND IT!

I found the previous source of the spam for incoming.spamassassin.org  It's some tags hidden on SA's website.  -- *Kevin A. McGrail* 703-798-0171 (wireless) https://www.linkedin.com/in/kmcgrail

AutoMC vs BuildBot Question

Hi all, Q: is http://automc.spamassassin.org/updates/ the replacement for http://buildbot.spamassassin.org/updatestage/? I'm working to update some scripts. Regards, KAM -- Kevin A. McGrail VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https

Re: Script for under limit for masscheck

Thanks and agreed.  Bug closed. On 8/25/2018 10:19 AM, Dave Jones wrote: > On 08/23/2018 08:28 PM, Kevin A. McGrail wrote: >> Dave, can you take a look at this script? >> >> https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7121 >> > > I wrote a bash script

Script for under limit for masscheck

Dave, can you take a look at this script? https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7121 -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

fail2ban was Re: sa-update ruleset updates enabled again

e to rate-limit itself? >> >> — Matthias >> >> Von meinem iPhone gesendet >> >>> Am 21.11.2017 um 03:53 schrieb Kevin A. McGrail >>> : >>> >>>> On 11/20/2017 7:17 PM, Dave Jones wrote: >>>> Could we use somethin

DNS and Masscheck changes in preparation for 3.4.2

.4.2 CNAME from 3600 to 360. Also, Dave, please add a 3.4.3 CNAME in preparation for that version. Any comments? -- Kevin A. McGrail VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 -- Kevin A. McGrail VP F

DNS and Masscheck changes in preparation for 3.4.2

.4.3 CNAME in preparation for that version. Any comments? -- Kevin A. McGrail VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171

Re: checkMasscheckContribs.sh on sa-vm1.apache.org - not enough contributors for SVN 1831317

This is expected from a mass check break that occurred. -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On Thu, May 10, 2018 at 11:17 AM, root <r...@sa-vm1.apa

Re: Mirror updates

Jarif, are you using caching? I didn't see that in the ticket. -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On Fri, Apr 13, 2018 at 11:33 PM, Jari Fredriksson

Re: [Bug 7566] "SHA1 verification failed" for sa-update.razx.cloud since 1-2 weeks

That -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On Sun, Mar 25, 2018 at 12:07 PM, Dave Jones <da...@apache.org> wrote: > On 03/20/2018 06:18 PM, Bi

Re: [Bug 7566] "SHA1 verification failed" for sa-update.razx.cloud since 1-2 weeks

Or creating it in a temporary location knowing it will be changed later. -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On Tue, Mar 20, 2018 at 2:45 PM, Bill Cole

Re: [Bug 7566] "SHA1 verification failed" for sa-update.razx.cloud since 1-2 weeks

That is an interesting question because you are right, they are supposed to be immutable. Dave, is something happening in an 18 hour window as he describes? -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project h

Re: Validating *.tar.gz files using *.tar.gz.sha1

You are correct. I found that the filenames in the sha1 do not reflect reality. Typically the files are really only used by sa-update so it doesn't cause an issue. -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project h

Re: [Bug 7566] "SHA1 verification failed" for sa-update.razx.cloud since 1-2 weeks

I would guess you caught it mid copy and it arose because of the caching. Just a guess but glad we know what's going on. On Mon, Mar 19, 2018, 15:09 Dave Warren wrote: > Howdy. I'm on this list. > > Okay, so this is a bit odd, it looks like the file 1827131.tar.gz was >

Fwd: [Bug 7566] "SHA1 verification failed" for sa-update.razx.cloud since 1-2 weeks

Dave, any thoughts? This is odd! -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 -- Forwarded message -- From: <bugzi

Re: Clues needed on rule update process

consider the rules gen his baby. > 3. How do I get access to sa-vm1? For #3, make sure you have your ssh key in id.apache.org and we open a ticket such as this one: https://issues.apache.org/jira/browse/INFRA-15491 Regards, KAM -- Kevin A. McGrail Asst. Treasurer & VP F

Fwd: Fwd: Nightly Mass-Check account request

Going through old issues trying to prep for a release. Did we get Giovani on masscheck? Forwarded Message Subject:Fwd: Nightly Mass-Check account request Date: Mon, 30 Oct 2017 08:46:19 -0400 From: Kevin A. McGrail <kevin.mcgr...@mcgrail.com>

Re: French ISP Would like to participate to massChecks

>> https://bz.apache.org/SpamAssassin/show_bug.cgi?id=6694 >> >> Currently I have setup some basic monitoring scripts to make sure we >> have enough masscheck contributors and ham/spam corpora.  I think if >> someone went rogue on us we would know it pretty quickl

Re: French ISP Would like to participate to massChecks

Hi Sidney, I'd defer it to Dave.  He really spearheaded all the recent work and would likely know it off-hand since it's on new servers, etc. On 1/23/2018 9:26 AM, Sidney Markowitz wrote: Hi Kevin, This brings up an issue - The instructions on how to handle a request like this seem out of

Re: Fwd: [Bug 7331] channel: SHA1 verification failed, channel failed

On 1/18/2018 7:17 AM, Dale Blount wrote: FWIW, since the DNS publishing delay was added, my sa-update has run successfully each morning. Thanks, Dale!

Re: Notes about Trap - Re: colo/incoming.spamassassin.org server

org - Add to SysAdmins Docs / wiki the new apachesf and remove colo and note that trap-proc is no longer online. On 1/16/2018 7:19 PM, Dave Jones wrote: On 01/16/2018 09:00 AM, Kevin A. McGrail wrote: Joe and Dave + SASA: I have combed my notes.  Here's what I have which I have removed some pas

Fwd: [jira] [Resolved] (INFRA-15846) sa-vm1.apache.org lower ram to 8GB

g/jira/browse/INFRA-15846 Project: Infrastructure Issue Type: Project Components: VM Reporter: Kevin A. McGrail Assignee: Chris Lambertus Priority: Minor Thank you for the help with the machine. We have identified the issue with th

Notes about Trap - Re: colo/incoming.spamassassin.org server

5/named I didn't find any cron jobs scheduled that would be pulling/transferring via rsync either. I aliased my email address to root's on that box so I would get all emails and so far just a few cron jobs with minor issues. I searched the /home/trap directory for any "signs of life" since

Re: sa-vm1.apache.org is unresponsive

to decomm that extra space for other usage? On 1/15/2018 11:22 AM, Dave Jones wrote: On 01/09/2018 07:13 AM, Kevin A. McGrail wrote: Offlist reply by accident.  Repeating... On 1/8/2018 9:52 AM, Dave Jones wrote: On 01/08/2018 08:06 AM, Kevin A. McGrail wrote: On 1/8/2018 8:01 AM, Dave Jones

Re: Fwd: [Bug 7331] channel: SHA1 verification failed, channel failed

. My cron script looks like this: /usr/bin/vendor_perl/sa-update --gpgkey 6C6191E3 --channel updates.spamassassin.org RET=$? if [ "$RET" -eq 0 ]; then     /usr/bin/vendor_perl/sa-compile && systemctl restart spamassassin fi On 01/10/2018 09:09 AM, Kevin A. McGrail wrot

Re: sa-vm1.apache.org is unresponsive

Offlist reply by accident.  Repeating... On 1/8/2018 9:52 AM, Dave Jones wrote: On 01/08/2018 08:06 AM, Kevin A. McGrail wrote: On 1/8/2018 8:01 AM, Dave Jones wrote: I know the nightly rules promotion script hits the ruleqa site to make sure there have been 3 days of successful masschecks so

Re: sa-vm1.apache.org is unresponsive

On 1/8/2018 8:01 AM, Dave Jones wrote: I know the nightly rules promotion script hits the ruleqa site to make sure there have been 3 days of successful masschecks so if we did add a captcha, that would have to be excluded. I have the web logs from the ruleqa site going to their own files now

Re: sa-vm1.apache.org is unresponsive

08:07 PM, Kevin A. McGrail wrote: On 1/4/2018 9:03 PM, Dave Jones wrote: VM good now.  Chris bumped it up to 16 GB.  I am not complaining but I think that something is going wrong that will eat up all the RAM no matter how much there is. I am really not used to unstable Linux boxes no matter

Re: checkDNShosting.sh on sa-vm1.apache.org - 106 DNS hosting issues found

On 1/6/2018 10:08 AM, Dave Jones wrote: Looks like b.auth-ns.sonic.net. is down. https://intodns.com/spamassassin.org I've alerted Joe Muller at Sonic, thanks.

Re: Cron <www-data@sa-vm1> [ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh

On 1/5/2018 2:10 PM, Cron Daemon wrote: Error while processing /etc/awstats/awstats.sa-vm1.apache.org.conf Create/Update database for config "/etc/awstats/awstats.sa-vm1.apache.org.conf" by AWStats version 7.4 (build 20150714) >From data in log file "/var/log/apache2/other_vhosts_access.log"...

Re: sa-vm1.apache.org is unresponsive

On 1/4/2018 9:03 PM, Dave Jones wrote: VM good now.  Chris bumped it up to 16 GB.  I am not complaining but I think that something is going wrong that will eat up all the RAM no matter how much there is. I am really not used to unstable Linux boxes no matter the flavor. This is, however, the

Re: sa-vm1.apache.org is unresponsive

in the dark. I got some monit emails this morning that it hit high memory allocation but this doesn't make sense with the amount of RAM it had.  I think it was already at 12 GB of RAM if my memory serves me. Dave On 01/04/2018 02:42 PM, Kevin A. McGrail wrote:  https://issues.apache.org/jira

Re: sa-vm1.apache.org is unresponsive

PM, Kevin A. McGrail wrote: https://issues.apache.org/jira/browse/INFRA-15788 On 1/4/2018 3:40 PM, Kevin A. McGrail wrote: It definitely could be.  I don't show the box as responsive again. Opening a ticket. Regards, KAM On 1/4/2018 1:05 PM, Dave Warren wrote: Is this related to rsync failing

Re: sa-vm1.apache.org is unresponsive

https://issues.apache.org/jira/browse/INFRA-15788 On 1/4/2018 3:40 PM, Kevin A. McGrail wrote: It definitely could be.  I don't show the box as responsive again. Opening a ticket. Regards, KAM On 1/4/2018 1:05 PM, Dave Warren wrote: Is this related to rsync failing on rsync.spamassassin.org

Re: sa-vm1.apache.org is unresponsive

It definitely could be.  I don't show the box as responsive again. Opening a ticket. Regards, KAM On 1/4/2018 1:05 PM, Dave Warren wrote: Is this related to rsync failing on rsync.spamassassin.org::updates? If so, it seems to be happening again. Looks to have started around 9 hours ago:

Re: sa-vm1.apache.org is unresponsive

Go Go Infra! On 1/3/2018 6:18 PM, Dave Jones wrote: On 01/03/2018 05:13 PM, Dave Jones wrote: FYI - I opened a ticket with infra... https://issues.apache.org/jira/browse/INFRA-15779 That VM has some sort of memory resource leak.  I have monit setup to email me when resource utilization gets

Re: Mirror rsync source restore

10 (01:07) > >I will setup a script to watch closely when the files are removed next >time so I can get an email soon after this happens again to give me an >idea where to start looking. > >Dave > > >On 12/31/2017 01:57 PM, Kevin A. McGrail wrote: >> To try

Fwd: Re: Fwd: Re: apachesf account at Sonic

New box from Sonic.  I've create a tasklist to get started, etc. Dave, can you spearhead this?    You'll be please do know that the new server is up. You can access it as follows: host: 64.142.56.146    The network block is 64.142.56.144/28 (14 usable) and power can be remotely controlled via

Re: Ruleset updates cleaned out

On 11/29/2017 5:12 PM, Dave Warren wrote: Shortly before 2017-11-28 08:30 UTC the bulk of files were removed. This was not intended.  Dave and I were working on the issue already. Regards, KAM

Re: Ruleset updates cleaned out

On 11/29/2017 4:33 PM, Dave Jones wrote: Kevin, When you get a few minutes, please look at the sa-vm1.apache.org:/var/www/automc.spamassassin.org/update dir. Something or somebody has removed most of the files that were in there. I set the perms on a bunch of files in that dir a few days ago

Re: NOTE: Warning to Abusers of Update Servers

On 11/27/2017 12:06 AM, Dave Warren wrote: I’m not currently behind CloudFlare, but I already wrote code to purge their cache whenever mirrored content is rsync’d in case I do move anything under CloudFlare in the future, or use any other CDN. I’m automating a couple mirrors to flip to

Re: cPanel mirror additions

On 11/26/2017 11:09 AM, Dave Jones wrote: On 11/25/2017 04:59 PM, Kevin A. McGrail wrote: Dave, in talks with cPanel a few weeks they also offered help using their 40+ mirrors worldwide.  We should open a ticket and think about how we can use shorted-path or geolocated algorithms coupled

Re: notes about new mirrors as Re: NOTE: Warning to Abusers of Update Servers

about 10x the size, then it might be more of a problem that needed solving. Fair enough. Regards, KAM -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: NOTE: Warning to Abusers of Update Servers

I wonder if his cdn is messing things up? Regards, KAM On November 25, 2017 10:10:15 PM EST, Dave Jones <da...@apache.org> wrote: >On 11/25/2017 06:08 PM, Jari Fredriksson wrote: >> >>> Kevin A. McGrail <kevin.mcgr...@mcgrail.com> kirjoitti 26.11.2017 >kello 0.

Fwd: Possible Abuse of Apache SpamAssassin update servers

FYI I sent just one to get a data point. Forwarded Message Subject:Possible Abuse of Apache SpamAssassin update servers Date: Tue, 21 Nov 2017 08:14:01 -0500 From: Kevin A. McGrail <kmcgr...@apache.org> To: n...@interconnects.us CC:

Re: sa-update ruleset updates enabled again

On 11/21/2017 12:33 AM, Matthias Leisi wrote: In addition to server-side blocking, would it make sense for sa-update to rate-limit itself? — Matthias Yes, good idea.  Added to my notes. Von meinem iPhone gesendet Am 21.11.2017 um 03:53 schrieb Kevin A. McGrail <kevin.mcgr...@mcgrail.

Re: sa-update ruleset updates enabled again

On 11/20/2017 7:17 PM, Dave Jones wrote: Could we use something like mod_evasive to limit any IP connecting more than 3 times (one batch of ruleset files) an hour? SA instances behind NAT'd IPs could cause a legitimate reason for more than 2x hits per day. I'd like to keep it simpler for now. 

Re: sa-update ruleset updates enabled again

Dave, can you share the script you used for that?  Assuming some grep of access log and then an awk and a sort on the IP address? I think we'll need to develop a policy that we can then block people checking more than a certain number of times.  I would say since we publish only 1x per day,

Re: sa-update ruleset updates enabled again

I'll take a look at this too on my server. On 11/20/2017 2:14 PM, Dave Jones wrote: On 11/19/2017 02:33 AM, Matthias Leisi wrote: Heads up.  DNS updates for sa-update have been enabled again. The next rules promotion will happen in about 11 hours around 2:30 AM UTC. Traffic on my mirror

Fwd: Cron <automc@sa-vm1> ~/svn/trunk/build/mkupdates/run_nightly | /usr/bin/tee /var/www/automc.spamassassin.org/mkupdates/mkupdates.txt

   So nice to wakeup to normal cron jobs again :-) Forwarded Message Subject: Cron ~/svn/trunk/build/mkupdates/run_nightly | /usr/bin/tee /var/www/automc.spamassassin.org/mkupdates/mkupdates.txt Date: Mon, 20 Nov 2017 08:34:07 + (UTC) From: Cron

Re: 72_scores.cf compared to the one from march 15

On 11/15/2017 4:43 PM, Dave Jones wrote: I got my SVN authentication issue figured out on my laptop and committed these.  Fingers crossed for the run in about 5 hours. Excellent.  Sorry, today was an ASF board meeting so hectic!

Re: comparing 72_scores.cf files

Very Cool.  Is there a Tl;Dr result you came up with or is this more something prepped for when we get to the stage to review? On 11/15/2017 7:27 AM, Merijn van den Kroonenberg wrote: I wanted to compare the 72_scores.cf file against the one from yesterday and the one from march. However the

Re: 72_scores.cf compared to the one from march 15

On 11/15/2017 6:33 AM, Merijn van den Kroonenberg wrote: That, or maybe Kevin can step in for now and do the commit for you? Good to know you are on the road and thanks for still trying to help! Happy to try and help! Regards, KAM

Re: Fwd: Re: apachesf account at Sonic

On 11/14/2017 8:07 AM, Dave Jones wrote: What do we think they will be hosting?  My masscheck server at ENA is providing about 77% of the current masscheck corpus (we really need other contributors) and it is an 8 core a 8 GB RAM VM.  It really only needs that much RAM and cores for the

Re: Is the rsync OK?

On 11/14/2017 2:26 AM, John Hardin wrote: On Tue, 14 Nov 2017, Jari Fredriksson wrote: but it still asks for the password. It sounds like your SSH public/private key setup has broken. Ensure that your private key is still available at your end. Try ssh to the rsync box and verify that the

sa-update issue follow-up

OK, so following up my last email, it appears all old updates were gone too.  I have only 57 update files.  These are release artifacts and need to be put back. Apologies if I said to move them but people are using them it appears.  I think I found them in an archives dir and I created a

sa-update issues

Dave, So looking at http://svn.apache.org/viewvc/spamassassin/dns/spamassassin.org?view=markup Shows “1799552" but I don't show that on my mirror Any ideas what's going on with that? Regards, KAM

Re: spamassassin.org

On 11/9/2017 12:06 PM, Greg Stein wrote: The short answer is: the PMC is in charge. Not a problem. My concern is the reliance on an informal arrangement with 3rd parties that underlies the SA operations. I've shared that concern, and am now satisfied :-) Perfectly valid concern that I

Re: Mailserver at 52.169.9.191

On 11/8/2017 10:02 AM, Dave Jones wrote: Dave, with rules how many versions do we publish now?  Just one with a cname for a few versions?  Which versions?  Sorry, I can't figure out how to get into PowerDNS to check!

Re: Mailserver at 52.169.9.191

I’m very much in favor of aggregating and analyzing data, that’s bascially what we do at dnswl.org  :) Having said that, I usually don’t see that much load on our sa-update mirror, just a bit of bandwidth being used. Well nice sleuthing to figure out the culprits

SpamAssassin SysAdmins List - Please Join

Hi All, As mirror operators for SpamAssassin, would you mind joining the Apache SpamAssassin SysAdmin's list by emailing sysadmins-subscr...@spamassassin.apache.org, please? Regards, KAM

Re: Cron <automc@sa-vm1> ~/svn/trunk/build/mkupdates/run_nightly | /usr/bin/tee /var/www/automc.spamassassin.org/mkupdates/mkupdates.txt

Looking for some help for Dave. Anyone? On 11/7/2017 7:37 AM, Dave Jones wrote: I need some help understanding this problem now.  The "promotions validated" have failed for 3 weeks now so the active.list is not updating.  There seems to be some relationship to the masscheck ruleqa web output

Re: Mailserver at 52.169.9.191

tthias <https://www.dnswl.org/> Matthias Leisi, Project Leader dnswl.org <https://www.dnswl.org/> Mail reputation – Protect against false positives matth...@dnswl.org <mailto:matth...@dnswl.org> | Twitter: @dnswlorg <https://twitter.com/dnswlorg> Am 07.

Re: Fwd: Cron <root@sa-vm1> svn update /var/www/automc.spamassassin.org/updates > /dev/null

Ty. Regards, KAM On November 6, 2017 3:56:32 AM PST, Dave Jones <da...@apache.org> wrote: >On 11/06/2017 05:53 AM, Kevin A. McGrail wrote: >> Neat >> Regards, >> KAM >> >> > >That seemed to be a temporary problem with DNS or SVN. I was ab

Re: mailspike in 72_scores

You should rant about rspamd on list so you can shame moee into working on it :-) Regards, KAM On November 5, 2017 12:21:03 PM EST, Dave Jones wrote: >On 11/05/2017 10:26 AM, Merijn van den Kroonenberg wrote: >> Note to self: investigate why in do-nightly-rescore-example.sh is

Re: Good 72_scores.cf

On 11/3/2017 8:33 AM, Merijn van den Kroonenberg wrote: I was speaking more to the fact that I'd like to add the multilanguage descriptions back.  I documented it in bugzilla especially if someone else commits a rule with similar. Yeah it would be good if the update system was resistant to

Re: Good 72_scores.cf

On 11/3/2017 7:50 AM, Dave Jones wrote: Woo hoo!  Looks like we have a full 72_scores after the fix to MILLION_USD.  Thanks Merijn! Now, the interesting thing is does changing the system to en_US fix the issue if we revert my change to that rule? Forwarded Message Subject:  

Re: mailspike in 72_scores

On 11/2/2017 6:44 AM, Merijn van den Kroonenberg wrote: While debugging the score generation problem, I encountered another weird case in 72_scores.cf. It is about the mailspike rules which are in 50_scores so should not be in 72_scores. There was already an existing issue about this:

Re: Eureka: truncation of 72_active.cf

On 11/2/2017 8:40 AM, Merijn van den Kroonenberg wrote: The checkout works as you would expect. But its just very confusing a revision is used which is not inside the spamassassin project. It might also cause side effects in other part of the process as David mentioned. But the check out part

Re: Eureka: truncation of 72_active.cf

: Kevin A. McGrail Sent: Wednesday, November 01, 2017 10:49 PM To: David Jones ; Merijn van den Kroonenberg Subject: Re: Eureka: truncation of 72_active.cf On 11/1/2017 5:31 PM, David Jones wrote: I found another bug in the DKIM_VALID_EF rule description that needed to be wrapped in a version check

Re: Fwd: Nightly Mass-Check account request

+1. On 10/30/2017 8:58 AM, Dave Jones wrote: On 10/30/2017 07:46 AM, Kevin A. McGrail wrote: Any chance you want to vet and let this person in? Sure.  I will get his rsync account setup and check his masscheck submission hits to make sure his ham/spam are being properly sorted. Dave

Fwd: Nightly Mass-Check account request

Any chance you want to vet and let this person in? Forwarded Message Subject:Nightly Mass-Check account request Date: Mon, 30 Oct 2017 09:28:38 +0100 From: Giovanni Bechis To: priv...@spamassassin.apache.org -BEGIN PGP SIGNED

Re: Status of spamassassin server at Sonic?

/should be turned down. The server in question reports as incoming.spamassassin.org.    Thank you. -- Joe Muller Sonic System Operations -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Fwd: New CrashPlan Backup Alerts

On 10/2/2017 1:12 PM, Dave Jones wrote: Yikes. Do the drives spin and get recognized by the controller?  Did you try Spinrite on the drives to see if that could bring it back to life just enough to rebuild the RAID and copy the data off?  I can loan you my copy of SpinRite if you want to try.

Re: masscheck sync server down?

Tom, the box ran out of ram.  We've increased the ram and bounced it. Thanks again for letting us know! Regards, KAM

Fwd: [jira] [Commented] (INFRA-15078) Cannot SSH to sa-vm1.apache.org

ssue Type: Project Components: VM Reporter: Kevin A. McGrail Assignee: Daniel Takamori Repeat of INFRA-14785 likely and we have a hung box again. Can you increase the RAM by 2-8GB depending on what you see? Ty! -- This message was sent by Atlassian JIRA (v6.4.14#64029)

Re: masscheck sync server down?

On 9/13/2017 5:28 AM, Tom Hendrikx wrote: Hi, This morning, masscheck gives me this error while syncing the initial data (i.e. not the results): Syncing nightly_mass_check rsync: safe_read failed to read 1 bytes [Receiver]: Connection reset by peer (104) rsync error: error in rsync protocol

Fwd: SA-Update Mirror Check: http://www.sa-update.pccc.com/ is down

This is expected.  We are replacing the computer. Forwarded Message Subject:SA-Update Mirror Check: http://www.sa-update.pccc.com/ is down Date: Tue, 5 Sep 2017 09:02:22 -0400 From: root To: priv...@spamassassin.apache.org

Re: Fwd: [jira] [Updated] (INFRA-14986) sa-vm1.apache.org appears offline.

On 8/30/2017 3:44 PM, Dave Jones wrote: Something is wrong if that VM is running out of RAM. There must be a memory leak or something. I guess we will have to figure that out somehow. Could be a DDoS type attack where they are hitting us with a billion SSH commands. Any sign what might be

Fwd: [jira] [Updated] (INFRA-14986) sa-vm1.apache.org appears offline.

porter: Kevin A. McGrail Assignee: Daniel Takamori Priority: Blocker Our VM has been having problems for a few hours. SSH is non-responsive. Not responding to pings but unsure if ICMP is blocked. Notification Type: PROBLEM Service: SSH Host: SpamAssassin Project VM Address:

Re: Fwd: Fw: ** PROBLEM Service Alert: SpamAssassin Project VM/SSH is CRITICAL **

Thanks, I concur. I opened https://issues.apache.org/jira/browse/INFRA-14986 On 8/30/2017 9:54 AM, Dave Jones wrote: Our VM has been having problems for a few hours... Forwarded Message Subject: Fw: ** PROBLEM Service Alert: SpamAssassin Project VM/SSH is CRITICAL **

Fwd: [jira] [Commented] (INFRA-14852) The spamassassin2.zones.apache.org (temp online) is closing ssh conns, please bounce box

ts: VM Reporter: Kevin A. McGrail Assignee: Chris Lambertus Hi Infra, the box that was onlined in INFRA-14687 is known wonky. It's currently closing ssh conns. Can you bounce the box, please? -- This message was sent by Atlassian JIRA (v6.4.14#64029)

Re: Unable to get into spamassassin2.zones.apache.org

On 8/12/2017 10:36 AM, Kevin A. McGrail wrote: On 8/12/2017 9:56 AM, Dave Jones wrote: Kevin I am not able to login to this server like we did a few weeks ago with: ssh -p 80 r...@spamassassin-vm.apache.org spamassassin2.zones.apache.org It appears the special sshd setup you did is no longer

Re: Unable to get into spamassassin2.zones.apache.org

On 8/12/2017 9:56 AM, Dave Jones wrote: Kevin I am not able to login to this server like we did a few weeks ago with: ssh -p 80 r...@spamassassin-vm.apache.org spamassassin2.zones.apache.org It appears the special sshd setup you did is no longer listening on port 80. I tried various

Re: Unable to get into spamassassin2.zones.apache.org

I thought I turned that off after you were in normally. Give me a few. Regards, KAM On August 12, 2017 9:56:48 AM EDT, Dave Jones wrote: >Kevin >I am not able to login to this server like we did a few weeks ago with: > >ssh -p 80 r...@spamassassin-vm.apache.org

Re: SPAM & RBL issues for Apache.org

ailto:cor...@apache.org>> wrote: yeah, a jira for tracking this would be good. Iirc the KAM.cf is updated using from, however I'm unsure of the frequency (the puppet manifest linked should be able to show this) On Wed, Aug 9, 2017 at 9:21 AM K

Re: SPAM & RBL issues for Apache.org

On 8/9/2017 11:34 AM, Geoffrey Corey wrote: It's been a while since I looked, but our spamassassin setup is using your KAM.cf file: https://github.com/apache/infrastructure-puppet/blob/deployment/modules/spamassassin/manifests/spamd.pp#L16 As for the RBLs, I know we use some of it, and I

SPAM & RBL issues for Apache.org

s.apache.org/thread.html/0ad12d5216122939ea8544601a5e87961ff8812e319cda78caf3bd8e@%3Cusers.spamassassin.apache.org%3E Regards, KAM -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

sa-vm1 can't ssh

FYI that a ticket is open: https://issues.apache.org/jira/browse/INFRA-14785

Apologies!

All, In my zeal to fix the SA ruleqa/masscheck system, I unfortunately caused ire yesterday. We onlined two old boxes for research. Some people were flooded with old emails that were queued up, others were confused but more importantly I upset Infra. For the record, *I* am the one who

Re: Anyone there to look at something right away?

.apache.org is not, correct? Regards, KAM On 7/20/2017 4:41 PM, Chris Lambertus wrote: Kevin you specifically asked for these machines to be brought back up. On Jul 20, 2017, at 1:24 PM, Kevin A. McGrail <kevin.mcgr...@mcgrail.com> wrote: It's cml. He's looking at files for a box and

Re: Fixing the 72_scores.cf problem

On 6/23/2017 11:43 AM, Dave Jones wrote: Kevin, I am seeing other mailing list all complain about SA allowing more spam lately. I really want to get this triaged tomorrow morning when I finally get time to work on this. What do you recommend? I was thinking of taking an old 72_scores.cf

<    1   2   3   >