Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ms-update-phishing: URLs are "301 Moved Permanently" #694

Closed
dneuhaeuser opened this issue Nov 5, 2024 · 5 comments
Closed

ms-update-phishing: URLs are "301 Moved Permanently" #694

dneuhaeuser opened this issue Nov 5, 2024 · 5 comments
Labels
bug

Comments

@dneuhaeuser
Copy link
Contributor

dneuhaeuser commented Nov 5, 2024 •
edited
Loading

/usr/sbin/ms-update-phishing cannot download the phishing site updates anymore.

Apparently something changed on the website and the http URLs are now redirected to https.

With curl in use, this redirect is not followed.
The downloaded files phishing.bad.sites.conf.master.gz and phishing.safe.sites.conf.master.gz
only contain the message "301 Moved Permanently"

Should we update the URLs to https, like so?

BADURL='https://phishing.mailscanner.info/phishing.bad.sites.conf.gz';
SAFEURL='https://phishing.mailscanner.info/phishing.safe.sites.conf.gz';

And/or should we include the '-L' parameter in the curl commands to follow further redirects which might come in the future?
@mikaku
Copy link
Contributor

mikaku commented Nov 6, 2024

I'm also experiencing the same.
The contents of the file /etc/MailScanner/phishing.bad.sites.conf.master.gz is:

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>

@shawniverson
Copy link
Member

PR #695 going to merge this.

@jcbenton
Copy link
Contributor

jcbenton commented Nov 6, 2024

I corrected the config on the web server that was forcing https. It will now accept http connections. However, you should update your script to use https. I have also updated the cron download on the phishing website with the https pointers.

@shawniverson
Copy link
Member

v5.5.3-1 contains PR #695. Going to leave this issue open for a couple days for everyone.

@jcbenton
Copy link
Contributor

jcbenton commented Nov 6, 2024

This is fixed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@mikaku @jcbenton @shawniverson @dneuhaeuser