ruleqa logs broken? (was: Re: High DNSWL spam hits)

[Karsten Bräckelmann <gu...@rudersport.de>]

On Sun, 2011-03-06 at 23:15 +0100, Karsten Bräckelmann wrote:
> > > >  0.3363  bb-guenther_fraud 

> > Is it the entity actually sending the spam, or is it something that should
> > be in your trusted_networks?
> 
> According to my original, receiving-time DNSWL results, all of them are
> correct. These are being mass-checked on the server (again, they are
> actually intended for the Sought Fraud rule-set, which exclusively uses
> the body), though the set with initial DNSWL hits are not forwarded.

Dunno if these are re-used from the receiving-time (hope so), or
actually checked against the current DNSxL listing.

Since the mass-check is being run on the server, I don't even know if I
could identify them from the logs -- just tried to have a look at it. No
joy though, logs are broken?

  cannot open /export/home/ruleqadb/20110305/
  r1078246-n//LOGS.all-spam-net-bb-guenther.20110305-r1078246-n.log.gz


-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}