You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Do...@bakerbotts.com on 2005/05/27 18:54:15 UTC

70_sare_header.cf dupe

> Checking for duplicate rules using the following command,
> 
> cat *.cf | awk '/^score/ {print $2}' | sort | uniq -c | sort -nr | awk
> '{if ($1 > 1) print $0}' | more
> 
> I found the following duplicate:
> 
> # grep -n SARE_MSGID_LONG50 * | grep score
> 70_sare_header.cf:965:score     SARE_MSGID_LONG50        1.666
> 70_sare_header.cf:2637:score     SARE_MSGID_LONG50        1.666
> 
----------------------

I got an 'undeliverable' email when trying to send to
header_abuse@rulesemporium.com, the email referenced in the cf file.

 -----Original Message-----
From: 	Dawson, Donald  
Sent:	Friday, May 27, 2005 11:45 AM
To:	'header_abuse@rulesemporium.com'
Subject:	70_sare_header.cf dupe


> Donald Dawson
> Database Admin
> Baker Botts L.L.P.
> 713-229-2183
> 

Re[2]: 70_sare_header.cf dupe

Posted by Robert Menschel <Ro...@Menschel.net>.
Hello Bill,

Friday, May 27, 2005, 10:46:32 AM, you wrote:

BL> 70_sare_header.cf dupe----- Original Message ----- 
BL> From: Donald.Dawson@bakerbotts.com

>> Checking for duplicate rules using the following command,
>> cat *.cf | awk '/^score/ {print $2}' | sort | uniq -c | sort -nr | awk
>> '{if ($1 > 1) print $0}' | more
>> I found the following duplicate:
>> # grep -n SARE_MSGID_LONG50 * | grep score
>> 70_sare_header.cf:965:score     SARE_MSGID_LONG50        1.666
>> 70_sare_header.cf:2637:score     SARE_MSGID_LONG50        1.666
>> ---------------------- 

BL> I also found dups for:
BL> SARE_OBFU_BUY_SUB - in 70_sare_obfu.cf - (two different rules)

Sho'nuff. Both good rules. I'll merge them together in the next
release.

Bob Menschel




Re: 70_sare_header.cf dupe

Posted by Bill Landry <bi...@pointshare.com>.
70_sare_header.cf dupe----- Original Message ----- 
From: Donald.Dawson@bakerbotts.com

> Checking for duplicate rules using the following command,
> cat *.cf | awk '/^score/ {print $2}' | sort | uniq -c | sort -nr | awk 
> '{if ($1 > 1) print $0}' | more
> I found the following duplicate:
> # grep -n SARE_MSGID_LONG50 * | grep score
> 70_sare_header.cf:965:score     SARE_MSGID_LONG50        1.666
> 70_sare_header.cf:2637:score     SARE_MSGID_LONG50        1.666
> ---------------------- 

I also found dups for:

VIRUS_WARNING436 - in bogus-virus-warnings.cf - (typo in score name)
VIRUS_WARNING202 - in bogus-virus-warnings.cf - (two different rules)
SARE_OBFU_BUY_SUB - in 70_sare_obfu.cf - (two different rules)

Bill 


Re: 70_sare_header.cf dupe

Posted by Robert Menschel <Ro...@Menschel.net>.
Hello Donald,

Friday, May 27, 2005, 9:54:15 AM, you wrote:

DDbc> Checking for duplicate rules using the following command,

DDbc> cat *.cf | awk '/^score/ {print $2}' | sort | uniq -c |
DDbc> sort -nr | awk '{if ($1 > 1) print $0}' | more
DDbc> I found the following duplicate:
DDbc> # grep -n SARE_MSGID_LONG50 * | grep score
DDbc> 70_sare_header.cf:965:score     SARE_MSGID_LONG50        1.666
DDbc> 70_sare_header.cf:2637:score     SARE_MSGID_LONG50        1.666

Yep.  No harm done, since the rule runs only once, but you're right --
the rule is in both header0.cf and header1.cf; I'll fix that in the
next release.

DDbc> I got an 'undeliverable' email when trying to send to
DDbc> header_abuse@rulesemporium.com, the email referenced in the cf
DDbc> file.

That address used to work.  I'll find one that does work and document
it in the rules file also.

Bob Menschel