On Fri, 2004-12-10 at 08:32 -0800, Robert Leonard wrote: > When I lint this rule I get numerous events warning that the describe > field is more the 50 characters in length.. Is this something new, or > something I can fix (short of going through and modifying each of > these lines by hand)? > > Just running the rulesdujour script I am getting this type of warning > all over the place... Manually running the --lint seems to pass, with > the debug I see the warnings.. > > For example.. > warning: description for SARE_SUB_DOUBLE_CONS is over 50 chars >
I'm seeing them too... invalid regexp for rule FR_ENCODED_EMAIL: m*^http://.{15,99}[a-z0-9-]{3}\%40[a-z0-9-]{3,24}\.[a-z]{2}*i warning: description for SARE_MULT_BMASTGR is over 50 chars warning: description for SARE_SUB_11CONS_WORD is over 50 chars warning: description for SARE_RECV_IP_061050 is over 50 chars warning: description for SARE_SUB_BAD_PUNCT is over 50 chars (SA says there are 82 of these...) I also noticed that almost every single one of my rules was updated automatically by cron last night, so I tried going to rulesemporium.com to download the rules manually (to compare with the ones on the server), but it seems like there's a problem with the files, but they redirect to a URL: http://rhn/ I did the manual download from my workstation (not the server, different IP), so it's completely fresh... wget output is below: $ wget http://www.rulesemporium.com/rules/evilnumbers.cf --11:18:59-- http://www.rulesemporium.com/rules/evilnumbers.cf => `evilnumbers.cf' Resolving www.rulesemporium.com... 209.218.125.112, 67.67.32.202 Connecting to www.rulesemporium.com[209.218.125.112]:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://rhn/ratelimit.php?/rules/evilnumbers.cf [following] --11:18:59-- http://rhn/ratelimit.php?/rules/evilnumbers.cf => `ratelimit.php?%2Frules%2Fevilnumbers.cf' Resolving rhn... failed: Host not found. Did someone copy the wrong files over to the new SARE server? - Jon -- [EMAIL PROTECTED] Administrator, tgpsolutions http://www.tgpsolutions.com
signature.asc
Description: This is a digitally signed message part
