Bug#428319: spamassassin: sa-update started from cron.daily is probably a DoS attack

2007-06-11 Thread Duncan Findlay
On Mon, Jun 11, 2007 at 10:46:37AM +0100, Justin Mason wrote: > Right now we only have one mirror listed, but it's trivial to add more to > the MIRRORED_BY list. Also, a failed download will not affect anything > for users, apart from maybe that they may miss a pending update for N > hours -- ther

Bug#428319: spamassassin: sa-update started from cron.daily is probably a DoS attack

2007-06-11 Thread Justin Mason
> I'm not sure we can right now. (The architecture is there so that we > could handle it if we wanted to, but we'd better mitigate it if > possible.) That's my thinking -- the architecture is already there. sa-update's DNS polling is incredibly lightweight and can handle millions of clients upda

Bug#428319: spamassassin: sa-update started from cron.daily is probably a DoS attack

2007-06-10 Thread Duncan Findlay
On Sun, Jun 10, 2007 at 09:23:14PM +0100, Justin Mason wrote: > Marc A. Donges writes: > > sa-update being started from cron.daily is probably a DoS attack against > > Spamassassin update servers. > Actually, we can handle it just fine. We know what we're doing ;) I'm not sure we can right now.

Bug#428319: spamassassin: sa-update started from cron.daily is probably a DoS attack

2007-06-10 Thread Justin Mason
Marc A. Donges writes: > sa-update being started from cron.daily is probably a DoS attack against > Spamassassin update servers. Actually, we can handle it just fine. We know what we're doing ;) --j. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Cont

Bug#428319: spamassassin: sa-update started from cron.daily is probably a DoS attack

2007-06-10 Thread Marc A. Donges
Package: spamassassin Version: 3.2.0-2 Severity: important sa-update being started from cron.daily is probably a DoS attack against Spamassassin update servers. Although it is not the default configuration, many users will activate automatic rule updates via sa-update with the mechanism provided