[SURBL-Discuss] Re: [Uribl-discuss] Lookup of (phishing) URLs with
dirk at bonengel.de
Fri Aug 12 19:11:06 CEST 2005
Sorry, forget about the last point - overlooked the 'reverse IP
addresses' option (as Dallas E pointed out correctly)
> sorry for crossposting, but I think this concerns both SURBL and URIBL.
> Given: A (phishing-)mail containg a link to the IP 184.108.40.206
> The lookup page on rulesemporium.com says it's listed on ws and ph in
> However, I find that the current SpamAssassin (3.0.4) does not appear
> to lookup IP-based URLs. Is that correct?
> Secondly, which form would be correct to lookup that IP via dig (or
> whatever), and how should SA handle it if it tried to lookup IP-based
> dig 220.127.116.11.multi.surbl.org gives no results back, but the
> reversed dotted decimal form does:
> dig 18.104.22.168.multi.surbl.org returns 127.0.0.12.
> Lastly: The URIBL-Lookup page says that the IP 22.214.171.124 is
> neither listed on SURBL nor URIBL but claims that 126.96.36.199 is
> listed both in SURBL (ws and ph) and URIBL (black). I take that to be
> simply wrong.
> Uribl-discuss mailing list
> Uribl-discuss at lists.maddoc.net
More information about the Discuss