404 while getting RDJ updates?

[Anders Norrbring <li...@norrbring.se>]

Anyone else getting 404 errors from RDJ lately?

The following rules had errors:
Tim Jackson's (et al) bogus virus warnings had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
TripWire had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
EvilNumbers2 had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
Ruleset for header abuse (sets 0-3) had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
SARE General Subject Ruleset (set 1 -- hits occasional ham) had an 
unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
SARE General Subject Ruleset (set 2 -- future) had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
SARE URI Ruleset (set 1 -- occasinally hits ham) had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
SARE URI Ruleset (set 3 -- hits significant ham) had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
SARE Obfuscation catching Ruleset (set 1 -- hits occasional ham) had an 
unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
SARE Obfuscation catching Ruleset (set 2 -- future) had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000

Re: 404 while getting RDJ updates?

[Jim Maul <jm...@elih.org>]

guenther wrote:
> On Thu, 2007-06-07 at 17:45 +0200, Anders Norrbring wrote:
>> Anyone else getting 404 errors from RDJ lately?
> 
> Yes, this topic came up just a few hours ago. Probably a dDOS attack.
> 
> Please disable all RDJ till further notice.
> 
>   guenther
> 
> 

I would imagine this is related to www.uribl.com and surbl.org  having 
issues as well.  Both are now pointing to 127.0.0.1 in what I would 
assume was an attempt to stop the attack.  Some spammer is pissed off it 
seems...

-Jim

Re: 404 while getting RDJ updates?

[Anders Norrbring <li...@norrbring.se>]

guenther skrev:
> On Thu, 2007-06-07 at 17:45 +0200, Anders Norrbring wrote:
>> Anyone else getting 404 errors from RDJ lately?
> 
> Yes, this topic came up just a few hours ago. Probably a dDOS attack.
> 
> Please disable all RDJ till further notice.
> 
>   guenther
> 
> 

Now it's at least partly working, I still have problems with BOGUSVIRUS 
that only results in some html code.
Ideas on that one? Google didn't turn up much useful info (or I didn't 
catch it..)

Anders.

Re: 404 while getting RDJ updates?

[guenther <gu...@rudersport.de>]

On Thu, 2007-06-07 at 17:45 +0200, Anders Norrbring wrote:
> Anyone else getting 404 errors from RDJ lately?

Yes, this topic came up just a few hours ago. Probably a dDOS attack.

Please disable all RDJ till further notice.

  guenther


-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

Re: 404 while getting RDJ updates?

[arni <ma...@arni.name>]

Anders Norrbring schrieb:
> Anyone else getting 404 errors from RDJ lately?

http://saupdates.openprotect.com/ works btw (sa-update channel)