Fixing the 72_scores.cf problem

[Dave Jones <da...@apache.org>]

Kevin,

I am seeing other mailing list all complain about SA allowing more spam 
lately.  I really want to get this triaged tomorrow morning when I 
finally get time to work on this.  What do you recommend?  I was 
thinking of taking an old 72_scores.cf from March and manually creating 
the 3 update files (tar.gz, asc, sha1), testing on my own servers, then 
manually updating the TXT records to point to that version once the 
mirrors have updated. Then I would disable the DNS updates.

Does this sound like a solid triage plan to you?

Dave

Re: Fixing the 72_scores.cf problem

[Dave Jones <da...@apache.org>]

I am so sorry for your loss.  Thanks for getting back with me in this
difficult time.

Dave

On Jun 23, 2017 11:06 AM, "Kevin A. McGrail" <ke...@mcgrail.com>
wrote:

> On 6/23/2017 11:43 AM, Dave Jones wrote:
>
>> Kevin,
>>
>> I am seeing other mailing list all complain about SA allowing more spam
>> lately.  I really want to get this triaged tomorrow morning when I finally
>> get time to work on this.  What do you recommend? I was thinking of taking
>> an old 72_scores.cf from March and manually creating the 3 update files
>> (tar.gz, asc, sha1), testing on my own servers, then manually updating the
>> TXT records to point to that version once the mirrors have updated. Then I
>> would disable the DNS updates.
>>
>> Does this sound like a solid triage plan to you?
>>
>> Dave
>>
>
> I think reverting to the last known good version and disabling DNS makes
> sense, yes. However, I think it is safer to just copy the last known good
> files to a higher digit and update DNS with that new versions.  I think
> that will be multiple file sets for 3.3, 3.4, trunk, etc.  I'm sorry I
> can't look right now.
>
> My mother died a few days ago so life is crap for me but I've been trying
> to follow things and working on various SA bugs.
>
> Best,
>
> KAM
>
>

Re: Fixing the 72_scores.cf problem

["Kevin A. McGrail" <ke...@mcgrail.com>]

On 6/23/2017 11:43 AM, Dave Jones wrote:
> Kevin,
>
> I am seeing other mailing list all complain about SA allowing more 
> spam lately.  I really want to get this triaged tomorrow morning when 
> I finally get time to work on this.  What do you recommend? I was 
> thinking of taking an old 72_scores.cf from March and manually 
> creating the 3 update files (tar.gz, asc, sha1), testing on my own 
> servers, then manually updating the TXT records to point to that 
> version once the mirrors have updated. Then I would disable the DNS 
> updates.
>
> Does this sound like a solid triage plan to you?
>
> Dave

I think reverting to the last known good version and disabling DNS makes 
sense, yes. However, I think it is safer to just copy the last known 
good files to a higher digit and update DNS with that new versions.  I 
think that will be multiple file sets for 3.3, 3.4, trunk, etc.  I'm 
sorry I can't look right now.

My mother died a few days ago so life is crap for me but I've been 
trying to follow things and working on various SA bugs.

Best,

KAM