Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Having Spamassassin Problems? - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Having Spamassassin Problems?

Karl sent us a note about date parsing issues in Spamassassin.  I thought we fixed all of these problems ten years ago when we went through the Y2K transition.  Apparently not.  More details are at these URLs:

http://www.arrfab.net/blog/?p=174
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6269
http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/emailed/00_FVGT_File001.cf?r1=794319&r2=796216&diff_format=h

Thanks for the info Karl!

Marcus H. Sachs
Director, SANS Internet Storm Center

Marcus

301 Posts
ISC Handler
There is also a problem with "date" on Linux. Try this command to show the year: date '+%G'
Anonymous
Looks like I spoke to soon... :(

http://lists.gnu.org/archive/html/bug-coreutils/2010-01/msg00008.html
Anonymous
Noticed this too...

(I find it valuable to have all my mailservers email me hourly from a cron job, and at the receiving end [which runs spamassassin] a .procmailrc script greps out the X-Spam-Status line containing a list of all test hits; if it doesn't match an expected set of values I receive an email alert; it can detect various DNS/config issues that might affect mail deliverability, as well as alerting me to this Spamassassin issue yesterday.)

As long as people are running sa-update daily, this problem should fix itself sometime today; the bug was fixed some time ago but apparently not pushed through to updates.spamassassin.org until yesterday.
Steven C.

171 Posts
date +%G seems to be working fine here. Note that on 2010-01-01 through 2010-01-03 it would display "2009" as suggested in the man page: "year of ISO week number (see %V); normally useful only with %V". If you want the calendar year you should be using %Y. See http://en.wikipedia.org/wiki/ISO_week_date for more info on how this works.
Anonymous

Sign Up for Free or Log In to start participating in the conversation!