Hello All,
CentOS release 6.3 (Final)
I am getting e-mails now where they are:
Subject: Cron root@www /usr/share/spamassassin/sa-update.cron 2>&1 | tee -a /var/log/sa-update.log
Body: http: GET http://daryl.dostech.ca/sa-update/asf/1387055.tar.gz request failed: 404 Not Found: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p>The requested URL /sa-update/asf/1387055.tar.gz was not found on this server.</p> <hr> <address>Apache/2.2.6 (Fedora) Server at daryl.dostech.ca Port 80</address> </body></html>
Can anyone help me understand what is happening here?
Are they trying to inject an http request, looking for a specific file? Or checking to see if I am running a piece of software that has vulnerabilities to exploit?
-Jason
On 19/09/2012 16:45, Jason T. Slack-Moehrle wrote:
Hello All,
CentOS release 6.3 (Final)
I am getting e-mails now where they are:
Subject: Cron root@www /usr/share/spamassassin/sa-update.cron 2>&1 | tee -a /var/log/sa-update.log
Body: http: GET http://daryl.dostech.ca/sa-update/asf/1387055.tar.gz request failed: 404 Not Found: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body>
<h1>Not Found</h1> <p>The requested URL /sa-update/asf/1387055.tar.gz was not found on this server.</p> <hr> <address>Apache/2.2.6 (Fedora) Server at daryl.dostech.ca Port 80</address> </body></html>
Can anyone help me understand what is happening here?
I've been getting these too... if I run sa-update manually it appears that I'm on the latest version, so I'm just lazily waiting to see if anyone will fix the cron email.. So until someone else chirps up, I guess we're on our own :-), but I thought you might appreciate that you're not alone.
On 9/19/2012 1:34 PM, Giles Coochey wrote:
On 19/09/2012 16:45, Jason T. Slack-Moehrle wrote:
Hello All,
CentOS release 6.3 (Final)
I am getting e-mails now where they are:
Subject: Cron root@www /usr/share/spamassassin/sa-update.cron 2>&1 | tee -a /var/log/sa-update.log
Body: http: GET http://daryl.dostech.ca/sa-update/asf/1387055.tar.gz request failed: 404 Not Found: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body>
<h1>Not Found</h1> <p>The requested URL /sa-update/asf/1387055.tar.gz was not found on this server.</p> <hr> <address>Apache/2.2.6 (Fedora) Server at daryl.dostech.ca Port 80</address> </body></html>
Can anyone help me understand what is happening here?
I've been getting these too... if I run sa-update manually it appears that I'm on the latest version, so I'm just lazily waiting to see if anyone will fix the cron email.. So until someone else chirps up, I guess we're on our own :-), but I thought you might appreciate that you're not alone.
The issue is with the particular file you are trying to update. You are looking for a 3rd party rule set from daryl.dostech.ca. Apparently, it is not available at the moment, so you're getting a 404. I don't use this rule set, so I haven't seen it.
If you ask on the SpamAssassin mailing list, someone might be able to help.
Do you use Parallels Plesk? Did you update? Seems to be related ... http://download1.parallels.com/Plesk/PP10/10.4/release-notes/parallels-plesk... based-os.html - see bug 85
I told them to reopen it, since I am getting those mails too since 3 days
-
Bowie Bailey -
Giles Coochey -
Jason T. Slack-Moehrle -
Sebi Lasse