Martijn Jongen has added SURBL support to ORFilter, a
free-ware Exchange plug in.
http://martijnjongen.com/orfilter
It works with SMTP server, Exchange Server 2000 and 2003 under
Windows 2000, 2003, XP.
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
We've made a list of the top SURBL DNS queries into my name server:
http://www.surbl.org/dns-queries.counts.txt
and a version with only whitelist hits:
http://www.surbl.org/dns-queries.whitelist.counts.txt
The sample size is somewhat small at 32k queries over the last 48
trailing hours, but it's still somewhat interesting. Specifically
2000 queries are sampled every 3 hours. (Please ignore some of
the junk at the end of the unwhitelisted counts. That's stuff
left over from DNS packets which I haven't cleaned out yet.)
I'm slightly surprised how high in the total rankings some spam
domains are. That represents a huge amount of spam sent and
blocked. :-)
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
(forwarded:)
From: Ryan Thompson <ryan(a)sasknow.com>
Date: Monday, September 6, 2004, 5:50:46 PM
Subject: Announce: GetURI 1.5 Released -- Major additions
Web site URL: http://ry.ca/geturi/
I'm extremely pleased to announce the release of GetURI 1.5. This is a
major new release that includes many new features to aid in the fight on
spam. GetURI is a program designed to make identification and hand-
classification of URIs easier.
This new version supports spam *and* ham message directories, enabling
you to include ham messages in your checks, to quickly identify domains
which appear in ham. Previously, only spam messages could be fed to
GetURI.
Those processing spamtraps, or hand-checking submitted domains for
blacklisting or whitelisting will be pleased to know that GetURI now
supports two new options: --hamdomains, and --spamdomains, which accept
filenames containing simple lists of domains that appear in ham and
spam.
If fed any kind of ham domains, GetURI will look for and produce a list
of false positives: domains listed in SURBL that appear in ham.
New experimental code has been added to automatically determine the age
of domains being checked, which has so far been a huge help for
hand-classifying domains. This is done in the nicest way possible, but
it uses public whois, and, as such, may violate some whois servers'
terms of service, so --age must be specified explicitly.
A new utility, uricat, has been added to produce simple lists of URIs
found in one or more text files.
Full change history: http://ry.ca/geturi/CHANGELOG
Updated Sample results: http://ry.ca/geturi/results.html
Documentation and download: http://ry.ca/geturi/
As always, your feedback is most welcome!
- Ryan
--
Ryan Thompson <ryan(a)sasknow.com>
SaskNow Technologies - http://www.sasknow.com
901-1st Avenue North - Saskatoon, SK - S7K 1Y4
Tel: 306-664-3600 Fax: 306-244-7037 Saskatoon
Toll-Free: 877-727-5669 (877-SASKNOW) North America
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
Hello!
Currently we are running with a somehow frozen ws.surbl.org list. We are
experiencing hardware trouble with one of the SURBL machines. New updates
will be processed, but most likely activated after we restore full
functionality.
The main SURBL site is not afffected, its only related to the WS updates.
We are working hard to get the processing box back online.
Bye,
Raymond Dijkxhoorn - WS SURBL.
Bob Apthorpe has written an open source Posix text filter that
calls SpamAssassin:
http://www.cynistar.net/~apthorpe/code/babycart/babycart.html
It is useful as a general spam check on arbitrary text for
example from a wiki or blog. It can be used with SURBLs,
RBLs or any other SpamAssassin rules.
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
Ryan Thompson has written some code to extract URIs from
messages, using SpamAssassin 3.0 code. It could be useful
for spam fighters in general, and in particular those
feeding URI domains and IP addresses into URI blocklists
such as SURBLs.
Jeff C.
---------- Forwarded message ----------
Date: Mon, 23 Aug 2004 11:13:46 -0600 (CST)
From: Ryan Thompson
To: SURBL Discussion list
Subject: Geturi 1.4 released! (The SURBL URI classification helper)
Finally. I've been taunting you poor folks for weeks, now. :-) Here it is:
http://ry.ca/geturi/ -- geturi v1.4
>From the DESCRIPTION:
geturi is designed to process a directory containing a list of RFC822
messages (one message per file). It analyses each message, attempts to
strip out as many unclickable URIs as possible, and then compiles the
list of found URIs, putting HTML output on STDOUT.
What I'd *like* to see are a bunch of people using this, and some
suggestions for improvement (I already have quite a few, some of which
are in the TODO section of the documentation). I'd call this alpha code
at the moment, for want of testers, but I don't know of any huge bugs.
Feedback more than welcome!
- Ryan
--
Ryan Thompson
SaskNow Technologies - http://www.sasknow.com
901-1st Avenue North - Saskatoon, SK - S7K 1Y4
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
ASTPS 0.50h adds SURBL support to Clearswift MAILsweeper,
NetIQ Mailmarshal, and other Windows mail scanners.
http://www.angelfire.com/ms3/mswtools
"ASTPS is an Anti Spam Tool which can be used as a
plug-in for Clearswift MAILsweeper, NetIQ Mailmarshal
and any other scanner platform running on Windows
2000/XP/2003 which supports external programs. ASTPS
detects obfuscation techniques used by spammers and
it detects messages send by common e-mail worms. It
supports a local hostname list, parallel IP and URL
RBL queries, and it has a single DNS timeout period."
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/