You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Daniel McDonald <da...@austinenergy.com> on 2011/03/21 14:02:53 UTC
Re: Suspicious URL:Re: __PILL_PRICE Problems
On 3/20/11 10:58 AM, "John Hardin" <jh...@impsec.org> wrote:
> On Sun, 20 Mar 2011, Matt Elson wrote:
>
>>> fails for me, loops, freebsd 7.3, intel, perl 5.12.3, SA 3.3.1, re2c
>>> 001305
>>>
>>> what rule should we comment out until this is fixed?
>>
>> Commenting out the following fixed it for me, so should be safe
>>
>> # tflags __PILL_PRICE_1 multiple
>> # tflags __PILL_PRICE_2 multiple
>> # tflags __PILL_PRICE_3 multiple
>>
>> in <rules_dir>/updates_spamassassin_org/72_active.cf
>>
>> Around line 5304.
>>
>> Matt
>
> I'll disable the whole set in my next commit until this is resolved.
I wonder if that is why my mass-checks have been taking 16-20 hours each
day?
>
> Is there a need for "tflags nocompile" ?
--
Daniel J McDonald, CCIE # 2495, CISSP # 78281
Re: __PILL_PRICE Problems
Posted by John Hardin <jh...@impsec.org>.
On Mon, 21 Mar 2011, Michael Scheidell wrote:
> On 3/21/11 11:13 AM, John Hardin wrote:
>> Nope, that probably isn't the pill_price rules then. They were added on
>> feb 13 rev 1070308.
>
> then they were updated? why didn't anyone have problems (100% cpu, loops,
> swap filling up) till this weekend?
A rules update went out this weekend. The last one was before those rules
were added to my sandbox.
I was assuming Dan was doing his masschecks against SVN rather than using
a production install maintained by sa-update. If he was using a production
install then his problems would have started Sunday rather than on March
1.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
W-w-w-w-w-where did he learn to n-n-negotiate like that?
-----------------------------------------------------------------------
8 days until the M1911 is 100 years old - and still going strong!
Re: __PILL_PRICE Problems
Posted by Jason Bertoch <ja...@i6ix.com>.
On 2011/03/21 11:16 AM, Michael Scheidell wrote:
>> Nope, that probably isn't the pill_price rules then. They were added
>> on feb 13 rev 1070308.
> then they were updated? why didn't anyone have problems (100% cpu,
> loops, swap filling up) till this weekend?
Presumably due to lack of sufficient ham/spam in the corpus, stock rule
updates haven't been pushed since December 2010. My first update to the
stock rules occurred shortly after midnight (UTC -5) Sunday morning.
--
/Jason
Re: __PILL_PRICE Problems
Posted by Michael Scheidell <mi...@secnap.com>.
On 3/21/11 11:13 AM, John Hardin wrote:
> Nope, that probably isn't the pill_price rules then. They were added
> on feb 13 rev 1070308.
then they were updated? why didn't anyone have problems (100% cpu,
loops, swap filling up) till this weekend?
--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
>*| *SECNAP Network Security Corporation
* Best Intrusion Prevention Product, Networks Product Guide
* Certified SNORT Integrator
* Hot Company Award, World Executive Alliance
* Best in Email Security, 2010 Network Products Guide
* King of Spam Filters, SC Magazine
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
Re: __PILL_PRICE Problems
Posted by John Hardin <jh...@impsec.org>.
On Mon, 21 Mar 2011, Daniel McDonald wrote:
> On 3/21/11 8:28 AM, "John Hardin" <jh...@impsec.org> wrote:
>
>> On Mon, 21 Mar 2011, Daniel McDonald wrote:
>>
>>> I wonder if that is why my mass-checks have been taking 16-20 hours each
>>> day?
>>
>> Can you isolate when that started happening?
>
> Feb 28th ran in 31 minutes.
>
> March 1st took 16 hours 15 minutes.
>
> I think I sorted out recent ham/spam that day.
>
> My box isn't swapping, jut running two cores at 96-99% cpu.
Nope, that probably isn't the pill_price rules then. They were added on
feb 13 rev 1070308.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Liberals love sex ed because it teaches kids to be safe around their
sex organs. Conservatives love gun education because it teaches kids
to be safe around guns. However, both believe that the other's
education goals lead to dangers too terrible to contemplate.
-----------------------------------------------------------------------
8 days until the M1911 is 100 years old - and still going strong!
Re: __PILL_PRICE Problems
Posted by Daniel McDonald <da...@austinenergy.com>.
On 3/21/11 8:28 AM, "John Hardin" <jh...@impsec.org> wrote:
> On Mon, 21 Mar 2011, Daniel McDonald wrote:
>
>> On 3/20/11 10:58 AM, "John Hardin" <jh...@impsec.org> wrote:
>>
>>> On Sun, 20 Mar 2011, Matt Elson wrote:
>>>
>>>>> fails for me, loops, freebsd 7.3, intel, perl 5.12.3, SA 3.3.1, re2c
>>>>> 001305
>>>
>>> I'll disable the whole set in my next commit until this is resolved.
>>
>> I wonder if that is why my mass-checks have been taking 16-20 hours each
>> day?
>
> Can you isolate when that started happening?
Feb 28th ran in 31 minutes.
March 1st took 16 hours 15 minutes.
I think I sorted out recent ham/spam that day.
My box isn't swapping, jut running two cores at 96-99% cpu.
--
Daniel J McDonald, CCIE # 2495, CISSP # 78281
Re: Suspicious URL:Re: __PILL_PRICE Problems
Posted by John Hardin <jh...@impsec.org>.
On Mon, 21 Mar 2011, Daniel McDonald wrote:
> On 3/20/11 10:58 AM, "John Hardin" <jh...@impsec.org> wrote:
>
>> On Sun, 20 Mar 2011, Matt Elson wrote:
>>
>>>> fails for me, loops, freebsd 7.3, intel, perl 5.12.3, SA 3.3.1, re2c
>>>> 001305
>>
>> I'll disable the whole set in my next commit until this is resolved.
>
> I wonder if that is why my mass-checks have been taking 16-20 hours each
> day?
Can you isolate when that started happening?
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Gun Control: The theory that a woman found dead in an alley, raped
and strangled with her panty hose, is somehow morally superior to
a woman explaining to police how her attacker got that fatal bullet
wound. -- L. Neil Smith
-----------------------------------------------------------------------
8 days until the M1911 is 100 years old - and still going strong!