Released today, SpamAssassin 3.0.0 has support for SURBLs
built-in and enabled by default. It checks multi.surbl.org
using the command urirhssub in the URIDNSBL plugin.
http://spamassassin.apache.org/full/3.0.x/dist/doc/Mail_SpamAssassin_Plugin…
If you administer a high volume mail server processing 100k
messages per day or more, please set up a local DNS mirror
for your own use of the SURBL zone files using rsync and rbldnsd
as described in some of the links on our rsync signup form:
http://www.surbl.org/rsync-signup.html
If you are able to host public DNS for the SURBL zones,
please let us know. Pre-release traffic was about 70-80k bits
per second, and we expect that to go up at least 5-fold, but
that's just an estimate.
Cheers,
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
We'd like to welcome and thank the addition of two new public
SURBL name servers j3 and k3.surbl.org administered by:
Arjen Wolfs of Wanadoo Nederland BV
Without all of our public nameservers and the help of their
administrators, SURBLs would not be possible.
Our thanks to all of them!
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
We'd like to welcome and thank the addition of a new public SURBL
name server d3.surbl.org administered by:
Kevin A. McGrail of Peregrine Computer Consultants Corporation
Without all of our public nameservers and the help of their
administrators, SURBLs would not be possible.
Our thanks to all of them!
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
After trying DNS TTLs at 1 hour, 25, 20, 15 and 10 minutes,
it appears that 15 minute TTLs optimizes both name server
traffic and the quickness of records being added or deleted
from the lists. Therefore, we are standardizing on 15 minute
TTLs for all SURBLs.
Note that this result applies to SURBL data and uses of it.
It may or may not apply to other types of RBLs.
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
We'd like to welcome and thank the addition of a new public SURBL
name server administered by:
Chris Stone of AxisInternet, Inc.
Without all of our public nameservers and the help of their
administrators, SURBLs would not be possible.
Our thanks to all of them!
Some additional name server news: all of the name servers which
we had temporarily commented out while they were being repaired
have been fully returned to service. A name server status page
can be found at:
http://www.surbl.org/nameservers-output.html
Also in case we haven't already mentioned it, the name servers
are now organized into letter names like a.surbl.org,
b.surbl.org, ... through n.surbl.org, and each name round robins
into two or three servers. As more are added, we will try to
balance them all at three servers per name, so that traffic is
balanced overall. Having more than one server per name lets us
comment one out without needing to change NS records in the
subdomain zone files and delegations, when maintenance on a
particular name server needs to be done, etc. It also keeps the
SURBL DNS packets smaller to have fewer name servers listed in
the NS records.
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
To follow up on an earlier announcement, in addition to a list of
the top SURBL DNS queries that hit whitelists:
http://www.surbl.org/dns-queries.whitelist.counts.txt
we've added a list of the top blocklist hits:
http://www.surbl.org/dns-queries.blocklist.counts.txt
Though the sample size is somewhat small at 32k queries over
the trailing 48 hours, the data may perhaps be useful for
expiring records from blocklists or checking whitelists.
We can increase the sample size if anyone thinks it worthwhile.
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
Martijn Jongen has added SURBL support to ORFilter, a
free-ware Exchange plug in.
http://martijnjongen.com/orfilter
It works with SMTP server, Exchange Server 2000 and 2003 under
Windows 2000, 2003, XP.
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
We've made a list of the top SURBL DNS queries into my name server:
http://www.surbl.org/dns-queries.counts.txt
and a version with only whitelist hits:
http://www.surbl.org/dns-queries.whitelist.counts.txt
The sample size is somewhat small at 32k queries over the last 48
trailing hours, but it's still somewhat interesting. Specifically
2000 queries are sampled every 3 hours. (Please ignore some of
the junk at the end of the unwhitelisted counts. That's stuff
left over from DNS packets which I haven't cleaned out yet.)
I'm slightly surprised how high in the total rankings some spam
domains are. That represents a huge amount of spam sent and
blocked. :-)
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/