search

MailScanner / v5

MailScanner v5
GNU General Public License v2.0
188 stars 60 forks source link

phishing.bad.sites not updated #537

Closed Ressy66 closed 3 years ago

Ressy66 commented 3 years ago

It seems even on a fresh install phishing.bad.sites no longer gets updated, the rules seem very ancient update fails even a manual run fails:

wget http://phishing.mailscanner.info/phishing.bad.sites.conf.gz --2021-03-26 16:19:37-- http://phishing.mailscanner.info/phishing.bad.sites.conf.gz Resolving phishing.mailscanner.info (phishing.mailscanner.info)... 188.166.22.71 Connecting to phishing.mailscanner.info (phishing.mailscanner.info)|188.166.22.71|:80... connected. HTTP request sent, awaiting response... 405 Not Allowed 2021-03-26 16:19:37 ERROR 405: Not Allowed.

and for the hell of it tried https

wget https://phishing.mailscanner.info/phishing.bad.sites.conf.gz --2021-03-26 16:20:03-- https://phishing.mailscanner.info/phishing.bad.sites.conf.gz Resolving phishing.mailscanner.info (phishing.mailscanner.info)... 188.166.22.71 Connecting to phishing.mailscanner.info (phishing.mailscanner.info)|188.166.22.71|:443... failed: Connection refused.

github-actions[bot] commented 3 years ago

Thank you for submitting your first issue to MailScanner! We will respond to you soon!

shawniverson commented 3 years ago

I'm having trouble reproducing this issue.

Ressy66 commented 3 years ago

well then its time for us to find alternatives because it dont work for me, still. wget https://phishing.mailscanner.info/phishing.bad.sites.conf.gz --2021-05-08 23:02:53-- https://phishing.mailscanner.info/phishing.bad.sites.conf.gz Resolving phishing.mailscanner.info (phishing.mailscanner.info)... 188.166.22.71 Connecting to phishing.mailscanner.info (phishing.mailscanner.info)|188.166.22.71|:443... failed: Connection refused.

Ressy66 commented 3 years ago

https://www.zonemaster.fr/result/641acb5805edbfed

perhaps this is why.... your DNS is screwed

msapiro commented 3 years ago

It is not a DNS issue. Your wget command properly resolved the host to IP 188.166.22.71. There are two issues.

You can't get https://phishing.mailscanner.info/phishing.bad.sites.conf.gz - it has to be http, not https. phishing.mailscanner.info doesn't listen on port 443.

Also, it appears that with wget, you need --user-agent="msv5 Update Script v0.2.0" or you get a 405 Not Allowed response, although this doesn't seem to be the case with curl.

Are you using the /usr/sbin/ms-update-phishing script which provides all the correct options and does work?

Ressy66 commented 3 years ago

Thanks Mark, Yes it stopped updating, thats why I tried wget

I'll reinstall