bad phishing sites/Scamnailer updates missing?

[Mark Sapiro]

There have been several issues with the bad phishing sites/Scamnailer
updates since last April.

The first issue was that the DNS TXT record for
emails.msupdate.greylist.bastionmail.com was not being updated (See
<http://lists.mailscanner.info/pipermail/mailscanner/2013-April/100612.html>
and then later it disappeared altogether. I developed patches to work
around this. See
<http://lists.mailscanner.info/pipermail/mailscanner/2013-May/100746.html>
and
<http://lists.mailscanner.info/pipermail/mailscanner/2013-June/100828.html>.

More recently, there was a problem with the updates themselves being
missing. See
<http://lists.mailscanner.info/pipermail/mailscanner/2013-October/100975.html>.
This was only temporary. This issue was fixed and also the issue of the
missing/not updated DNS TXT record was fixed as well.

Now there is a new problem: All the data and updates are working, but
there have been no new sites/domains added to the list since "This file
was generated at Thu Oct 10 00:44:45 BST 2013" (over 5 days ago).

In my experience, new domains are added multiple times every day. Thus,
it appears that the underlying process which collects these names and
updates the list may not be getting its data.

Can anyone investigate this?

[Stephen Cox]

Post by Mark Sapiro
Now there is a new problem: All the data and updates are working, but
there have been no new sites/domains added to the list since "This file
was generated at Thu Oct 10 00:44:45 BST 2013" (over 5 days ago).

There was a hosting fault again and the problem should now be fixed with
the next scheduled generation if not already.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20131017/7b73a295/attachment.html

[Mark Sapiro]

On Tue, Oct 15, 2013 at 8:35 PM, Mark Sapiro <mark at msapiro.net
Now there is a new problem: All the data and updates are working, but
there have been no new sites/domains added to the list since "This file
was generated at Thu Oct 10 00:44:45 BST 2013" (over 5 days ago).
There was a hosting fault again and the problem should now be fixed with
the next scheduled generation if not already.

Yes, it is working again.

[Peter Nitschke]

I had just about given up on this.

Many thanks!



*********** REPLY SEPARATOR ***********

Post by Stephen Cox

Post by Mark Sapiro
Now there is a new problem: All the data and updates are working, but
there have been no new sites/domains added to the list since "This file
was generated at Thu Oct 10 00:44:45 BST 2013" (over 5 days ago).

There was a hosting fault again and the problem should now be fixed with
the next scheduled generation if not already.
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!

[Gottschalk, David]

ScamNailer has been broken for me, for a while.

It seem to be getting a different error, that doesn't seem to be related to the issues reported since April.

Reading status from /var/cache/ScamNailer/status
Checking that /var/cache/ScamNailer/cache/2013-444 exists... no - resetting..... ok
Checking that /var/cache/ScamNailer/cache/-1.0 exists... ok
I am working with: Current: 2013-445 - 10 and Status: -1 - 0
This is base update
Unable to retrieve http://www.mailscanner.tv/emails..2013-445 :404 Not Found
Update required
Retrieving http://www.mailscanner.tv/emails.2013-445.1
Failed to retrieve http://www.mailscanner.tv/emails.2013-445.1 at ./ScamNailer line 276.
Retrieving http://www.mailscanner.tv/emails.2013-445.2
Failed to retrieve http://www.mailscanner.tv/emails.2013-445.2 at ./ScamNailer line 276.
Retrieving http://www.mailscanner.tv/emails.2013-445.3
Failed to retrieve http://www.mailscanner.tv/emails.2013-445.3 at ./ScamNailer line 276.
Retrieving http://www.mailscanner.tv/emails.2013-445.4
Failed to retrieve http://www.mailscanner.tv/emails.2013-445.4 at ./ScamNailer line 276.
Retrieving http://www.mailscanner.tv/emails.2013-445.5
Failed to retrieve http://www.mailscanner.tv/emails.2013-445.5 at ./ScamNailer line 276.
Retrieving http://www.mailscanner.tv/emails.2013-445.6
Failed to retrieve http://www.mailscanner.tv/emails.2013-445.6 at ./ScamNailer line 276.
Retrieving http://www.mailscanner.tv/emails.2013-445.7
Failed to retrieve http://www.mailscanner.tv/emails.2013-445.7 at ./ScamNailer line 276.
Retrieving http://www.mailscanner.tv/emails.2013-445.8
Failed to retrieve http://www.mailscanner.tv/emails.2013-445.8 at ./ScamNailer line 276.
Retrieving http://www.mailscanner.tv/emails.2013-445.9
Failed to retrieve http://www.mailscanner.tv/emails.2013-445.9 at ./ScamNailer line 276.
Retrieving http://www.mailscanner.tv/emails.2013-445.10
Failed to retrieve http://www.mailscanner.tv/emails.2013-445.10 at ./ScamNailer line 276.
Unable to open base file (/var/cache/ScamNailer/cache//2013-445)

Can someone help me figure this out? It seems mailscanner.tv doesn't host this file anymore, but the script doesn't have anywhere else to look.

Thanks.

David Gottschalk
Emory University
UTS Messaging Team
404.727.9744


-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Peter Nitschke
Sent: Saturday, October 19, 2013 10:58 AM
To: mailscanner at lists.mailscanner.info
Subject: Re: bad phishing sites/Scamnailer updates missing?

I had just about given up on this.

Many thanks!



*********** REPLY SEPARATOR ***********

Post by Stephen Cox

Post by Mark Sapiro
Now there is a new problem: All the data and updates are working, but
there have been no new sites/domains added to the list since "This
file was generated at Thu Oct 10 00:44:45 BST 2013" (over 5 days ago).

There was a hosting fault again and the problem should now be fixed
with the next scheduled generation if not already.
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

[Mark Sapiro]

Post by Gottschalk, David
Unable to retrieve http://www.mailscanner.tv/emails..2013-445 :404 Not Found

...

Post by Gottschalk, David
Can someone help me figure this out? It seems mailscanner.tv doesn't host this file anymore, but the script doesn't have anywhere else to look.

The current ScamNailer version is 2.10. Apparently the web site at
<http://www.scamnailer.info/> got rolled back at some point and shows
2.09, but this is out of date.

Line 140 in version 2.10 is

my $urlbase = "http://cdn.mailscanner.info/emails.";

This also works

my $urlbase = "http://www.mailscanner.eu/emails.";

The only change from 2.09 to 2.10 is the replacement of
www.mailscanner.tv with cdn.mailscanner.info, but 2.10 was released over
a year and a half ago. with this change.

The <http://www.scamnailer.info/> web site needs to be fixed.

Also, I just checked and <http://www.mailscanner.info/> appears to have
been rolled back too. These need to be fixed.

[Gottschalk, David]

Thanks Mark.

I tried to update to the latest version via the website before I posted this, but now I understand why it didn't fix the problem!

David Gottschalk
Emory University
UTS Messaging Team
404.727.9744


-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mark Sapiro
Sent: Friday, November 08, 2013 6:25 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: bad phishing sites/Scamnailer updates missing?

Post by Gottschalk, David
Unable to retrieve http://www.mailscanner.tv/emails..2013-445 :404 Not Found

...

Post by Gottschalk, David
Can someone help me figure this out? It seems mailscanner.tv doesn't host this file anymore, but the script doesn't have anywhere else to look.

The current ScamNailer version is 2.10. Apparently the web site at <http://www.scamnailer.info/> got rolled back at some point and shows 2.09, but this is out of date.

Line 140 in version 2.10 is

my $urlbase = "http://cdn.mailscanner.info/emails.";

This also works

my $urlbase = "http://www.mailscanner.eu/emails.";

The only change from 2.09 to 2.10 is the replacement of www.mailscanner.tv with cdn.mailscanner.info, but 2.10 was released over a year and a half ago. with this change.

The <http://www.scamnailer.info/> web site needs to be fixed.

Also, I just checked and <http://www.mailscanner.info/> appears to have been rolled back too. These need to be fixed.
--
Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
San Francisco Bay Area, California better use your sense - B. Dylan
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!