On Thursday May 12 2005 8:20 am, Tim Jackson wrote: > On Thu, 12 May 2005 07:48:40 -0400 > > Dimitri Yioulos <[EMAIL PROTECTED]> wrote: > > I've had RDJ fetching rules updates successfully until just > > recently. It seems that some part of my set-up now chokes on > > downloading and installing Tim Jackson's Bogus Virus Warnings > > ruleset. > > Please feel free to contact me directly off-list if you think there's > something up with my ruleset. > > > I recently sent a message to Tim, but haven't gotten a response. > > I may be missing it in my ocean of e-mails in which case I apologise, > but I don't appear to have a recent mail from you in my inbox. > > > The following rules had errors: > > Tim Jackson's (et al) bogus virus warnings had an unknown error: > > curl exit code: 18 > > curl: (18) transfer closed with 80982 bytes remaining to read > > 200 > > Did this by any chance happen on Sunday morning, when my host > apparently had a "weird crash"? Someone else the other day had the > same thing. > > > Lint output: config: SpamAssassin failed to parse line, skipping: > > <html> config: SpamAssassin failed to parse line, skipping: <head> > > config: SpamAssassin failed to parse line, skipping: <title>Error 500 > > Internal Server Error [timj.co.uk]</title> > > ... > > This bothers me a lot (and it looks like a generalised problem) and I am > cc'ing Chris the RDJ maintainer. Chris, how is it that a download which > has had a 500 error is managing to get saved to disk as a ruleset which > SA then tries to use? Surely any 5xx error should mean that the > downloaded page is discarded? Or did I screw something up? (a page with > the title of "Error 500" certainly *should* have been sent with a HTTP > 500 code) > > > Anyway, Dimitri, as someone else has observed, thanks to the SARE > hosts there is now a new URL for bogus-virus-warnings on > rulesemporium.com, which you are welcome to use and which means it's > not my fault if it doesn't work ;) > > http://www.rulesemporium.com/rules/bogus-virus-warnings.cf > > A recent RDJ update did include an update to this URL. > > Tim
Hi, Tim. Thanks for your response (and that of Nick). I'm taking the liberty of posting this on the SA list just in case I'm the one futzing up the send to you. I am, indeed, using the latest incarnation of RDJ. As I mentioned, I've used the SA/RDJ combination for some time, and it's worked fine, save for the period when I'd been blacklisted for inadvertently downloading Bogus Virus (I'm sure I was testing at the time; I'm happy you reinstated me). SInce reinstatement, I've had this problem. I did update SA recently, but it seems to me I was having the problem prior to that. My logs also seem to suggest that it's not an SA problem, though I'm by no means an SA expert. Other than that, I'm not sure what I can add. Oh yes, if I wget Bogus Virus, I seem to be OK. But, of course, that defeats the purpose of RDJ. Regards, Dimitri
