Discussion:
Bad phishing site update script problems
David Lee
2014-03-04 01:57:47 UTC
Permalink
Hi All,

Is anybody else seeing problems with updates of the
'phishing.bad.sites.conf' file?
When I try to run the update script, I see the following:

Reading status from /var/MailScanner/phishingupdate/status
Checking that /var/MailScanner/phishingupdate/cache/2014-092 exists... no -
resetting..... ok
Checking that /var/MailScanner/phishingupdate/cache/-1.0 exists... ok
Argument "2014-091" isn't numeric in numeric eq (==) at
/usr/sbin/update_bad_phishing_sites line 139.
I am working with: Current: 2014-092 - 99 and Status: -1 - 0
This is base update
Unable to retrieve http://cdn.mailscanner.info/.2014-092 :404 Not Found
Update required
Retrieving http://cdn.mailscanner.info/2014-092.1
Failed to retrieve http://cdn.mailscanner.info/2014-092.1 at
/usr/sbin/update_bad_phishing_sites line 220.
Updating live file /etc/MailScanner/phishing.bad.sites.conf
cp: cannot stat `/var/MailScanner/phishingupdate/cache//2014-092': No such
file or directory


Thanks
David
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140304/8744449b/attachment.html
Mark Sapiro
2014-03-04 02:26:47 UTC
Permalink
Post by David Lee
Hi All,
Is anybody else seeing problems with updates of the
'phishing.bad.sites.conf' file?
...
Post by David Lee
I am working with: Current: 2014-092 - 99 and Status: -1 - 0
This is base update
Unable to retrieve http://cdn.mailscanner.info/.2014-092 :404 Not Found
I see it too and also with ScamNailer. The issue is you have the latest
(patched) version of /usr/sbin/update_bad_phishing_sites and it tries to
guess the latest update if the txt record at
emails.msupdate.greylist.bastionmail.com is missing or out of date. The
record is still emails.2014-091.13 which is yesterday. There is no
record or data (yet?) for today. This may or may not resolve when some
server somewhere wakes up, comes back online or whatever the problem is.
--
Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
San Francisco Bay Area, California better use your sense - B. Dylan
David Lee
2014-03-04 06:10:40 UTC
Permalink
Post by Mark Sapiro
Post by David Lee
Hi All,
Is anybody else seeing problems with updates of the
'phishing.bad.sites.conf' file?
...
Post by David Lee
I am working with: Current: 2014-092 - 99 and Status: -1 - 0
This is base update
Unable to retrieve http://cdn.mailscanner.info/.2014-092 :404 Not Found
I see it too and also with ScamNailer. The issue is you have the latest
(patched) version of /usr/sbin/update_bad_phishing_
sites and it tries to
guess the latest update if the txt record at
emails.msupdate.greylist.bastionmail.com<http://emails.msupdate.greylist.bastionmail.com>is missing or out of date. The
record is still emails.2014-091.13 which is yesterday. There is no
record or data (yet?) for today. This may or may not resolve when some
server somewhere wakes up, comes back online or whatever the problem is.
OK. Thanks for that.

--
David
Post by Mark Sapiro
Post by David Lee
Hi All,
Is anybody else seeing problems with updates of the
'phishing.bad.sites.conf' file?
...
Post by David Lee
I am working with: Current: 2014-092 - 99 and Status: -1 - 0
This is base update
Unable to retrieve http://cdn.mailscanner.info/.2014-092 :404 Not Found
I see it too and also with ScamNailer. The issue is you have the latest
(patched) version of /usr/sbin/update_bad_phishing_sites and it tries to
guess the latest update if the txt record at
emails.msupdate.greylist.bastionmail.com is missing or out of date. The
record is still emails.2014-091.13 which is yesterday. There is no
record or data (yet?) for today. This may or may not resolve when some
server somewhere wakes up, comes back online or whatever the problem is.
--
Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
San Francisco Bay Area, California better use your sense - B. Dylan
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140304/4ef9e772/attachment.html
Mark Sapiro
2014-03-04 19:10:42 UTC
Permalink
Post by David Lee
Hi All,
Is anybody else seeing problems with updates of the
'phishing.bad.sites.conf' file?
...
Post by David Lee
I am working with: Current: 2014-092 - 99 and Status: -1 - 0
This is base update
Unable to retrieve http://cdn.mailscanner.info/.2014-092 :404 Not Found
If you are seeing these issues with update_bad_phishing_sites and/or
Scamnailer, you can avoid this with these patches

--- /usr/sbin/update_bad_phishing_sites.mas 2013-10-02
21:25:07.000000000 -0700
+++ /usr/sbin/update_bad_phishing_sites 2014-03-04 10:38:26.000000000 -0800
@@ -145,7 +145,8 @@
my $janone = (gmtime(timegm(0,0,0,1,0,$year-1900)))[6];
my $week = sprintf ("%02d", int (((gmtime)[7] + $janone) / 7));
my $mybase = "$year-$week$day";
-if ($currentbase lt $mybase) {
+#if ($currentbase lt $mybase) {
+if ($currentbase eq 0) {
$currentbase = $mybase;
$currentupdate = 99;
}



--- .cron/ScamNailer.new 2013-06-19 13:08:56.000000000 -0700
+++ .cron/ScamNailer 2014-03-04 10:36:53.000000000 -0800
@@ -226,7 +229,8 @@
my $janone = (gmtime(timegm(0,0,0,1,0,$year-1900)))[6];
my $week = sprintf ("%02d", int (((gmtime)[7] + $janone) / 7));
my $mybase = "$year-$week$day";
- if ($currentbase lt $mybase) {
+# if ($currentbase lt $mybase) {
+ if ($currentbase eq 0) {
$currentbase = $mybase;
$currentupdate = 99;
}


These changes will prevent losing the files all together if the data
files and the DNS TXT records at msupdate.greylist.bastionmail.com and
emails.msupdate.greylist.bastionmail.com are not being updated as is the
current case.

However, if as was the case a few months ago, only the DNS TXT records
are not updated, this will defeat the patch which would correctly guess
the updates.

Also, if your files do not have the line

if ($currentbase lt $mybase) {

this doesn't apply to you.
--
Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
San Francisco Bay Area, California better use your sense - B. Dylan
Loading...