[SURBL-Discuss] Re: [Uribl-discuss] Lookup of (phishing) URLs with an IP

Dirk Bonengel dirk at bonengel.de
Fri Aug 12 19:11:06 CEST 2005


Sorry, forget about the last point - overlooked the 'reverse IP 
addresses' option (as Dallas E pointed out correctly)

> Hi,
>
> sorry for crossposting, but I think this concerns both SURBL and URIBL.
>
> Given: A (phishing-)mail containg a  link to the IP  219.144.194.158
>
> The lookup page on rulesemporium.com says it's listed on ws and ph in 
> SURBL
>
> However, I find that the current SpamAssassin (3.0.4) does not appear 
> to lookup IP-based URLs. Is that correct?
>
> Secondly, which form would be correct to lookup that IP via dig (or 
> whatever), and how should SA handle it if it tried to lookup IP-based 
> URIs?
> dig 219.144.194.158.multi.surbl.org gives no results back, but the 
> reversed dotted decimal form does:
> dig 158.194.144.219.multi.surbl.org returns 127.0.0.12.
>
> Lastly: The URIBL-Lookup page says that the IP 219.144.194.158 is 
> neither listed on SURBL nor URIBL but claims that 158.194.144.219 is 
> listed both in SURBL (ws and ph) and URIBL (black). I take that to be 
> simply wrong.
>
> Dirk
>
>
> _______________________________________________
> Uribl-discuss mailing list
> Uribl-discuss at lists.maddoc.net
> http://lists.uribl.com/mailman/listinfo/uribl-discuss




More information about the Discuss mailing list