You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Jean-Paul Natola <jn...@familycareintl.org> on 2010/06/11 19:00:40 UTC
removing old/stale rules
Hi all,
Since my upgrade to 3.3.1, I see when running, sa -lint -D that there's a bunch of stuff, I assume are no longer used?
Like the entry below
Jun 11 12:57:36.792 [18565] dbg: config: warning: score set for non-existent rule AXB_HELO_LH_HOME
Is there a way to just start clean?
rather than manually searching and removing?
TIA
Re: removing old/stale rules
Posted by Michael Scheidell <sc...@secnap.net>.
On 6/11/10 4:40 PM, Michael Scheidell wrote:
> On 6/11/10 3:17 PM, Jean-Paul Natola wrote:
>> i've got DOZENS of these, shoud i log a bug for each?
>>
>> also I have TONS of these type of entries as well, it used to come up
>> clean before the upgrade,
>> and I'm also concerned because i get massive amounts of spamd
>> timeouts is it related?
>>
>> Jun 11 15:13:15.140 [20711] dbg: rules: meta test
>> VIRUS_WARNING_DOOM_BNC has undefined dependency 'VIRUS_WARNING_MYDOOM4'
> no, neither of those are from SA rules.
you might want to clean out (erase, remove) everything but the stock
rules and start over.
look to see where < 3.3 stored stock rules (on freebsd it was in
/usr/local/share/mail/spamassassin)
look to see where you have LOCAL rules (on freebsd, it was in
/usr/local/etc/mail/spamassassin)
grep for those rules you see missing, and see who is responsible,
complain to them.
if you don't know where it came from, delete it SA 3.3.1 has
incorporates lots of the sares/ and third party rules already.
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
Re: removing old/stale rules
Posted by Michael Scheidell <sc...@secnap.net>.
On 6/11/10 3:17 PM, Jean-Paul Natola wrote:
> i've got DOZENS of these, shoud i log a bug for each?
>
> also I have TONS of these type of entries as well, it used to come up clean before the upgrade,
> and I'm also concerned because i get massive amounts of spamd timeouts is it related?
>
> Jun 11 15:13:15.140 [20711] dbg: rules: meta test VIRUS_WARNING_DOOM_BNC has undefined dependency 'VIRUS_WARNING_MYDOOM4'
>
no, neither of those are from SA rules.
> Jun 11 15:13:15.172 [20711] dbg: rules: meta test FP_MIXED_PORN3 has undefined dependency 'FP_PENETRATION'
>
no, neither of those are from SA rules.
> Jun 11 15:13:15.245 [20711] dbg: rules: flush_evalstr (add_evalstr) compiling 60024 chars of Mail::SpamAssassin::Plugin::Check::_meta_tests_500_1
>
no, debug output has nothing to do with timeouts.
maybe you should turn debugging off.
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
RE: removing old/stale rules
Posted by Jean-Paul Natola <jn...@familycareintl.org>.
i've got DOZENS of these, shoud i log a bug for each?
also I have TONS of these type of entries as well, it used to come up clean before the upgrade,
and I'm also concerned because i get massive amounts of spamd timeouts is it related?
Jun 11 15:13:15.140 [20711] dbg: rules: meta test VIRUS_WARNING_DOOM_BNC has undefined dependency 'VIRUS_WARNING_MYDOOM4'
Jun 11 15:13:15.172 [20711] dbg: rules: meta test FP_MIXED_PORN3 has undefined dependency 'FP_PENETRATION'
Jun 11 15:13:15.245 [20711] dbg: rules: flush_evalstr (add_evalstr) compiling 60024 chars of Mail::SpamAssassin::Plugin::Check::_meta_tests_500_1
Jun 11 15:13:15.334 [20711] dbg: rules: flush_evalstr (add_evalstr) compiling 60036 chars of Mail::SpamAssassin::Plugin::Check::_meta_tests_500_2
Jun 11 15:13:15.438 [20711] dbg: rules: flush_evalstr (add_evalstr) compiling 60202 chars of Mail::SpamAssassin::Plugin::Check::_meta_tests_500_3
Jun 11 15:13:15.509 [20711] dbg: rules: flush_evalstr (run_generic_tests) compiling 18653 chars of Mail::SpamAssassin::Plugin::Check::_meta_tests_500_4
Jun 11 15:13:15.532 [20711] dbg: rules: run_generic_tests - compiling eval code: meta, priority 500
Jun 11 15:13:15.542 [20711] dbg: rules: compiled meta tests
Jun 11 15:13:15.702 [20711] dbg: check: tests=MISSING_DATE,MISSING_HEADERS,NO_RECEIVED,NO_RELAYS
Jun 11 15:13:15.702 [20711] dbg: check: subtests=__GATED_THROUGH_RCVD_REMOVER,__HAS_MESSAGE_ID,__HAS_MSGID,__HAS_SUBJECT,__MISSING_REF,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NONEMPTY_BODY,__NOT_SPOOFED,__SANE_MSGID,__TO_NO_ARROWS_R,__UNUSABLE_MSGID
Jun 11 15:13:15.705 [20711] dbg: timing: total 33538 ms - init: 25308 (75.5%), parse: 41 (0.1%), extract_message_metadata: 174 (0.5%), get_uri_detail_list: 3 (0.0%), tests_pri_-1000: 349 (1.0%), compile_gen: 2511 (7.5%), compile_eval: 196 (0.6%), tests_pri_-950: 29 (0.1%), tests_pri_-900: 30 (0.1%), tests_pri_-400: 28 (0.1%), tests_pri_0: 6661 (19.9%), tests_pri_500: 748 (2.2%), tests_pri_1000: 140 (0.4%)
________________________________________
From: Michael Scheidell [scheidell@secnap.net]
Sent: Friday, June 11, 2010 3:03 PM
To: users@spamassassin.apache.org
Subject: Re: removing old/stale rules
On 6/11/10 1:00 PM, Jean-Paul Natola wrote:
>
> Hi all,
>
> Since my upgrade to 3.3.1, I see when running, sa –lint –D that
> there’s a bunch of stuff, I assume are no longer used?
>
> Like the entry below
>
> Jun 11 12:57:36.792 [18565] dbg: config: warning: score set for
> non-existent rule AXB_HELO_LH_HOME
>
> Is there a way to just start clean?
>
> rather than manually searching and removing?
>
looks like a SA rule update bug, they removed the rule, but not the score.
grep AXB_HELO_LH_HOME
/var/db/spamassassin/3.003001/updates_spamassassin_org/*.cf
/usr/local/share/spamassassin/*.cf /usr/local/etc/mail/spamassassin/*.cf
/var/db/spamassassin/3.003001/updates_spamassassin_org/50_scores.cf:score AXB_HELO_LH_HOME
3.406 2.059 3.458 3.619
(ps, this is just a WARNING, it don't break anything)
pps, log a bug in spamassassin bugzilla.
> TIA
>
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
Re: removing old/stale rules
Posted by Michael Scheidell <sc...@secnap.net>.
On 6/11/10 1:00 PM, Jean-Paul Natola wrote:
>
> Hi all,
>
> Since my upgrade to 3.3.1, I see when running, sa –lint –D that
> there’s a bunch of stuff, I assume are no longer used?
>
> Like the entry below
>
> Jun 11 12:57:36.792 [18565] dbg: config: warning: score set for
> non-existent rule AXB_HELO_LH_HOME
>
> Is there a way to just start clean?
>
> rather than manually searching and removing?
>
looks like a SA rule update bug, they removed the rule, but not the score.
grep AXB_HELO_LH_HOME
/var/db/spamassassin/3.003001/updates_spamassassin_org/*.cf
/usr/local/share/spamassassin/*.cf /usr/local/etc/mail/spamassassin/*.cf
/var/db/spamassassin/3.003001/updates_spamassassin_org/50_scores.cf:score AXB_HELO_LH_HOME
3.406 2.059 3.458 3.619
(ps, this is just a WARNING, it don't break anything)
pps, log a bug in spamassassin bugzilla.
> TIA
>
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________