svn rules and viewvc

[R-Elists]

i used to be able to use wget to "easily" download rules from jhardin and
other sandboxes

now with this new viewvc, it is a total pain in the backside to do anything.

how do we make it so it is easy to get the sandbox rules again?

 - rh

[Karsten Bräckelmann-2]

On Thu, 2009-10-15 at 23:35 -0700, R-Elists wrote:
> i used to be able to use wget to "easily" download rules from jhardin and
> other sandboxes
>
> now with this new viewvc, it is a total pain in the backside to do anything.

The SA team has no control over this at all. It's ASF infrastructure.

> how do we make it so it is easy to get the sandbox rules again?

Use svn.


--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

[John Hardin]

On Thu, 15 Oct 2009, R-Elists wrote:

> i used to be able to use wget to "easily" download rules from jhardin
> and other sandboxes
>
> now with this new viewvc, it is a total pain in the backside to do
> anything.
>
> how do we make it so it is easy to get the sandbox rules again?
>
> - rh

Karsten beat me to it. Check out what you want using SVN and pull it into
your local config using symlinks or a lint-then-copy script. Keeping
current is a simple matter of "svn up" (plus the processing script, if
you're doing that).

Caveat, though: the sandbox is for testing rules. They may break your
setup, the rule names may change arbitrarily, the rules may disappear
without warning, and scores will probably not be assigned. I strongly
suggest you have a zzz_sandbox_scores.cf file where you assign your own
(conservative) scores to sandbox rules you are pulling into your
production SA.

Unfortunately there's no way to say "turn off all rules in file X except
for Y and Z", which would make using sandbox files in production a little
safer.

--
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@...    FALaholic #11174     pgpk -a jhardin@...
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Users mistake widespread adoption of Microsoft Office for the
   development of a document format standard.
-----------------------------------------------------------------------
  15 days since a sunspot last seen - EPA blames CO2 emissions

[Mynabbler ()]

John Hardin wrote:

Karsten beat me to it. Check out what you want using SVN and pull it into
your local config

I feel rather stupid here... I tried that, and it barfs on me:

# svn checkout http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/
svn: PROPFIND request failed on '/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin'
svn: PROPFIND of '/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin': 302 Found (http://svn.apache.org)

What gives??

[Mark Martinec]

Mynabbler,

> I tried that, and it barfs on me:
>  
>  # svn checkout
>  http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/
>  svn: PROPFIND request failed on
>  '/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin'
>  svn: PROPFIND of '/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin': 302
>  Found (http://svn.apache.org)
>  
>  What gives?

Try this:
$ svn co https://svn.apache.org/repos/asf/spamassassin/trunk/rulesrc/sandbox/jhardin


  Mark

[John Hardin]

On Mon, 2 Nov 2009, Mynabbler wrote:

> John Hardin wrote:
>> Karsten beat me to it. Check out what you want using SVN and pull it into
>> your local config
>
> I feel rather stupid here... I tried that, and it barfs on me:
>
> # svn checkout
> http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/
> svn: PROPFIND request failed on
> '/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin'
> svn: PROPFIND of '/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin': 302
> Found (http://svn.apache.org)
>
> What gives?

viewvc is an interactive web interface to the SVN repository; you can't
use svn to talk to the repository via the viewvc links, they are just for
browsing.

You need to talk to the repository directly, as Mark described.

--
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@...    FALaholic #11174     pgpk -a jhardin@...
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Our government should bear in mind the fact that the American
   Revolution was touched off by the then-current government
   attempting to confiscate firearms from the people.
-----------------------------------------------------------------------
  9 days until Veterans Day

[Adam Katz-10]

>> # svn checkout
>> http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/
>> svn: PROPFIND request failed on
>> '/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin'
>> svn: PROPFIND of '/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin':
>> 302
>> Found (http://svn.apache.org)
>>
>> What gives?
>
> viewvc is an interactive web interface to the SVN repository; you can't
> use svn to talk to the repository via the viewvc links, they are just
> for browsing.
>
> You need to talk to the repository directly, as Mark described.

Since these are Apache servers, shouldn't a user-agent-contingent
rewrite rule be able to handle all of that transparent to the user?
Looks like it's almost there, but the subversion client doesn't handle
302 redirects.  If all else fails, ProxyPass should do the trick.

(Somebody who better knows how this is implemented and those involved
could forward this to the right place.)

[Luigi Gasbarro]

I checked my mailserver vs http://cqcounter.com/rbl_check/ and the only
negative response comes from blacklist.spambag.org

I try same other IP (randomly) and have found the same RBL marking all the
address as negative

But is that list really credible? And in particular is used?

sorry for my poor english

luigi

[Bowie Bailey]

Luigi Gasbarro wrote:
>
> I checked my mailserver vs http://cqcounter.com/rbl_check/ and the
> only negative response comes from blacklist.spambag.org
>
> I try same other IP (randomly) and have found the same RBL marking all
> the address as negative

The spambag.org domain is expired.  It gives the same results for
anything on the domain.

> But is that list really credible?

Nope.

> And in particular is used?

I certainly hope not!

I've been using http://www.mxtoolbox.com/blacklists.aspx to check for
blacklist listings.

--
Bowie

[Ralf Hildebrandt]

* Luigi Gasbarro <luigi.gasbarro@...>:
>
> I checked my mailserver vs http://cqcounter.com/rbl_check/ and the
> only negative response comes from blacklist.spambag.org

It's dead

--
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. [phone] | Fax: [phone]
  ralf.hildebrandt@... | http://www.charite.de