Announce

announce@lists.surbl.org

187 discussions

SpamAssassin 3.0.1 SURBL rule type changed from header to body, requires rule edit!
by Jeff Chan 25 Oct '04

25 Oct '04

http://www.surbl.org/quickstart.html Important Note Regarding SpamAssassin 3.0.1 and later: When adding any URIDNSBL rules, including SURBL or SBL ones using urirhsbl, urirhssub or uridnsbl, be sure to set the rule type to "body". For example: urirhssub URIBL_JP_SURBL multi.surbl.org. A 64 body URIBL_JP_SURBL eval:check_uridnsbl('URIBL_JP_SURBL') describe URIBL_JP_SURBL Contains a URL listed in the JP SURBL blocklist tflags URIBL_JP_SURBL net score URIBL_JP_SURBL 4.0 This is a change from earlier versions of SpamAssassin, including 3.0.0, where "body" above was previously "header". Here is the changelog reference: r54022 | felicity | 2004-10-07 22:21:30 +0000 (Thu, 07 Oct 2004) | 1 line bug 3734: uridnsbl rules work on body data, not header data, so change the rule type from header to body If you had SpamAssassin 3.0.0 SURBL or uridnsbl rules before, you will need to edit them with this change or they will no longer work in 3.0.1 or later! Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

SURBL Quick Start page updated
by Jeff Chan 20 Oct '04

20 Oct '04

The SURBL Quick Start page has been updated to reflect that SpamAssassin 3 has default support for SURBLs, to take out mention of the various lists except JP which is not in some of the default configs yet, and to generally streamline it. There are other minor updates to the rest of the site also. http://www.surbl.org/ Comments welcome, Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

ANOUNCE: Welcoming new public name servers
by Jeff Chan 04 Oct '04

04 Oct '04

We'd like to welcome and thank the addition of three new public SURBL name servers e3, h3, and l3.surbl.org respectively administered by: Wayne Yeung of Mailshell Kristopher Austin of Oklahoma Christian University Tan Chao Ching and Josh Duan of Pacific Internet Ltd Without all of our public nameservers and the help of their administrators, SURBLs would not be possible. Our thanks to all of them! Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

GetURI 1.6 Released
by Ryan Thompson 01 Oct '04

01 Oct '04

2004-09-30: GetURI 1.6 Released I'm very pleased to announce the release of GetURI 1.6. Many new features have been put into to this quickly growing program, as have a few important bug fixes. Everyone already using GetURI is strongly encouraged to upgrade as soon as possible. If you haven't yet tried GetURI, now is a great time to start! What is GetURI? GetURI is a program designed to extract URIs from ham and spam messages, mbox files, or lists of domains, and present them in a format designed to help classify domains for anti-spam efforts such as SURBL, although it has other uses, too. The included 'uricat' utility provides a simple way to extract URIs from virtually any text file, regardless of how they are encoded. With the help of the SpamAssassin libraries, GetURI attempts to ignore unclickable domains (i.e., poisoning attempts), follow redirects, and otherwise simulate the action of mail user agents (MUAs) as closely as possible. Sample output: http://ry.ca/geturi/results.html What's new? Here are just a few of the most notable additions to GetURI 1.6: - Support for SpamAssassin 2.6x has been re-introduced. Now 3.0 and 2.6x are officially supported - By popular demand, support for processing mbox files has been added - GetURI now does several forward lookup checks on domains, including SBL/XBL, IADB2/WADB, as well as checks on nameservers, to aid classification. - More documentation is now included in the output, and the output format has been improved visually, to hopefully be somewhat more intuitive. - It is now possible to specify a specific SURBL host to query, instead of the previous default of multi.surbl.org - A potentially large memory leak was discovered in the handling of SA3.0 objects. Consequently, SA3.0 users should upgrade immediately to enjoy drastically reduced memory consumption. Many more changes have been implemented; please see http://ry.ca/geturi/CHANGELOG for details To fetch the new version of GetURI, please visit http://ry.ca/geturi/ As always, your feedback will help improve GetURI! Additional testers are always welcome. -- Ryan Thompson <ryan(a)sasknow.com> SaskNow Technologies - http://www.sasknow.com 901-1st Avenue North - Saskatoon, SK - S7K 1Y4 Tel: 306-664-3600 Fax: 306-244-7037 Saskatoon Toll-Free: 877-727-5669 (877-SASKNOW) North America

1 0

ANNOUNCE: Adding new JP list to multi.surbl.org
by Jeff Chan 28 Sep '04

28 Sep '04

[Please post follow ups to the SURBL discuss list or to me.] One of the distinct data sources currently feeding into ws.surbl.org includes data from Joe Wein and Raymond Dijkxhoorn with his colleagues at Prolocation. Raymond and Prolocation are currently processing more than 300,000 potential spams per day using Joe's jwSpamSpy server software and combining those with Joe's own results. In addition to the data processing software, Joe has an elaborate, thorough, and well-thought-out set of inclusion criteria which includes age of domain registration, manual checks, and other factors. The resulting data are an extensive list of spam URI domains with a very low false positive rate (hits on legitimate messages). We are calling this resulting data JP for Joe Wein + Prolocation. The bottom line is that JP (called PJ in the table below) has a significantly lower false positive rate than WS while having similar spam detection rates, for example as measured against a large corpora set belonging to Theo Van Dinter of SpamAssassin: OVERALL% SPAM% HAM% S/O RANK SCORE NAME 2424443 2357143 67300 0.972 0.00 0.00 (all messages) 100.000 97.2241 2.7759 0.972 0.00 0.00 (all messages as %) 7.595 7.8122 0.0045 0.999 1.00 0.00 URIBL_SC_SURBL 76.754 78.9448 0.0178 1.000 0.80 0.00 URIBL_OB_SURBL 77.230 79.4340 0.0208 1.000 0.60 1.00 URIBL_PJ_SURBL 0.985 1.0126 0.0045 0.996 0.50 0.00 URIBL_AB_SURBL 82.119 84.4600 0.1367 0.998 0.40 0.00 URIBL_WS_SURBL 0.021 0.0216 0.0045 0.829 0.00 0.00 URIBL_PH_SURBL So we feel the data could usefully be broken out into a separate list which could safely be scored higher than WS. We also continue to work on improving the False Positive rate of WS of course. We propose making JP a separate list within multi.surbl.org, but *not* a standalone list like jp.surbl.org, since it's a major effort to set up entirely new lists and most people should be using multi now. The main reason for announcing this change ahead of time is to allow developers of the many programs (in addition to SpamAssassin) now using SURBL data to update their code or configurations to take into account that the result codes in multi will be changing as a result of adding JP. JP would get the 64 bitmask, as in: 2 = comes from sc.surbl.org 4 = comes from ws.surbl.org 8 = comes from phishing list (labelled as [ph] in multi) 16 = comes from ob.surbl.org 32 = comes from ab.surbl.org 64 = comes from jp list So a record in SC, WS, and JP would give a value 127.0.0.70. One with WS, OB, and JP would resolve to 127.0.0.84, etc. Programs using multi.surbl.org should be updated accordingly. Since JP is currently included in WS, there will be 100% overlap of JP entries in WS so that any record in JP will also be in WS. In other words about half of the WS records in multi will increase by 64 due to overlap with JP. But WS will continue to use the 4 bit, as before. If your programs are decoding the multi results using the bit positions, they should need no adjustments to continue to handle the WS data. We hope that 5 days is not too short notice for this kind of change.... I will try to contact the developers of the various (non-SA) programs separately to make sure they're aware of the coming change. Hopefully most of them are on this announcement list however. We were not able to get JP as a separate list in yesterday's SpamAssassin 3.0.0 full release, but we have gotten it into SA 3.1 development. For now the JP data will continue to be included in WS, but just before Spam Assassin 3.1 gets released (probably in 6 months to a year from now), we will remove JP data from WS to make them separate lists within multi. This means that SpamAssassin 3.0 and other current users of WS will continue to to get the benefits of JP under their default shipping configurations, and that JP can also be used separately by those who modify their configurations to take advantage of it. In summary, we will: 1. Add JP to multi.surbl.org on Monday September 27th. (Note that like PH, JP would not be available as a separate list, only as part of multi.) 2. Keep the JP data in WS for now, so that regular 3.0 users get the advantages of JP also (as part of WS). 3. Ask the SpamAssassin developers to score JP separately in SA 3.1. 4. Remove JP from WS before the final SA 3.1 mass check and re-scoring is done, to make the two lists more separate for 3.1 . (Note that the separation is removal of the specific subset arrangement suggested in #2. If that is done, there will still be some minor overlap of the records in WS and JP.) 5. Inform people about removing JP from WS before we do it, so existing WS users can add JP, etc. Please post follow up questions or comments to the SURBL discuss list or to me personally. Thanks, Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 2

ANNOUNCE: ccTLDs in two-level-tlds file updated somewhat
by Jeff Chan 27 Sep '04

27 Sep '04

On Saturday, September 18, 2004, 11:58:56 PM, Frank Ellermann wrote: > [Konqueror list] >>> | name,ai,au,bd,bh,ck,eg,et,fk,il,in,kh,kr,mk,mt,na, >>> | np,nz,pg,pk,qa,sa,sb,sg,sv,ua,ug,uk,uy,vn,za,zw I have updated the ccTLDs for the ones Frank mentioned, removed some duplicates, and added some data for a few other ccTLDs. The results are in: http://spamcheck.freeapp.net/two-level-tlds Really this is just for completeness since geographic domains other than .us aren't used in spams too often. Jeff C. -- "If it appears in hams, then don't list it."

1 0

Suri checks mail in text files against SURBLs
by Jeff Chan 26 Sep '04

26 Sep '04

Yves Junqueira's Suri does SURBL checks on mail stored in files. Adapted from Devin Carraway's plugin to qpsmtp, Suri is a general-purpose program usable with amavisd and others. http://i-admin.blogspot.com/2004/09/suri-spamvertised-uris-filter-using.html Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

ANNOUNCE: SpamAssassin 3.0.0 released, includes SURBL support
by Jeff Chan 22 Sep '04

22 Sep '04

Released today, SpamAssassin 3.0.0 has support for SURBLs built-in and enabled by default. It checks multi.surbl.org using the command urirhssub in the URIDNSBL plugin. http://spamassassin.apache.org/full/3.0.x/dist/doc/Mail_SpamAssassin_Plugin… If you administer a high volume mail server processing 100k messages per day or more, please set up a local DNS mirror for your own use of the SURBL zone files using rsync and rbldnsd as described in some of the links on our rsync signup form: http://www.surbl.org/rsync-signup.html If you are able to host public DNS for the SURBL zones, please let us know. Pre-release traffic was about 70-80k bits per second, and we expect that to go up at least 5-fold, but that's just an estimate. Cheers, Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

ANOUNCE: Welcoming new public name servers
by Jeff Chan 18 Sep '04

18 Sep '04

We'd like to welcome and thank the addition of two new public SURBL name servers j3 and k3.surbl.org administered by: Arjen Wolfs of Wanadoo Nederland BV Without all of our public nameservers and the help of their administrators, SURBLs would not be possible. Our thanks to all of them! Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

ANOUNCE: Welcoming new public name server
by Jeff Chan 18 Sep '04

18 Sep '04

We'd like to welcome and thank the addition of a new public SURBL name server d3.surbl.org administered by: Kevin A. McGrail of Peregrine Computer Consultants Corporation Without all of our public nameservers and the help of their administrators, SURBLs would not be possible. Our thanks to all of them! Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

← Newer
1
...
9
10
11
12
13
14
15
...
19
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Announce