Announce

announce@lists.surbl.org

183 discussions

ANNOUNCE: SURBL rsync clean up
by Jeff Chan 17 Aug '04

17 Aug '04

We are cleaning up some of the redundant zone files in the SURBL rsync server: 1. surbl.rbldnsd - going away, use sc.surbl.org.rbldnsd instead 2. *.rbldns - going away when no traffic, use *.rbldnsd instead 3. surbl.bind - going away, use surbl.org.bind instead In all cases the replacement files use the preferred names, already exist, and have identical content. If you are using any of the old names, please change them to the new names. This should be a simple change to your scripts, and should not affect too many people. (Raymond posted some of the relevant logs on the SURBL discussion list.) Thanks, Jeff C.

1 0

[SURBL-Announce] ANNOUNCE: Deprecating be.surbl.org, please use ws.surbl.org instead
by Jeff Chan 17 Aug '04

17 Aug '04

We are deprecating be.surbl.org, the SURBL list made from a stale snapshot of the BigEvil list before it got ws added into it. BE probably isn't too useful anymore since it's not getting updated, so please change to using ws.surbl.org instead. Eventually we would like to get rid of BE entirely. http://www.surbl.org/lists.html#ws WS has: 1. BigEvil by Chris Santerre and his SARE cohorts 2. Paul Barbeau's MidEvil.cf 3. Bill Stearns' sa-blacklist 4. filtered spamtrap records from Joe Wein's jwSpamSpy 5. MailSecurity's formerly proprietary SURBL lists 6. data from Raymond Dijkxhoorn's Prolocation RBL 7. some other manual lists, mostly maintained by Chris. So if you were using BE, please change to WS instead. Config file entries for SpamAssassin look like this: An SA 2.63/2.64 rule and score using SpamCopURI (but not the SpamCop data!) looks like this: uri WS_URI_RBL eval:check_spamcop_uri_rbl('ws.surbl.org','127.0.0.2') describe WS_URI_RBL URI's domain appears in sa-blacklist tflags WS_URI_RBL net score WS_URI_RBL 3.0 An SA 3.0 rule and score using URIBL's urirhsbl looks like this: urirhsbl URIBL_WS_SURBL ws.surbl.org. A header URIBL_WS_SURBL eval:check_uridnsbl('URIBL_WS_SURBL') describe URIBL_WS_SURBL Contains a URL listed in sa-blacklist tflags URIBL_WS_SURBL net score URIBL_WS_SURBL 3.0 An SA 3.0 rule and score using URIBL's urirhssub looks like this: urirhssub URIBL_WS_SURBL multi.surbl.org. A 4 header URIBL_WS_SURBL eval:check_uridnsbl('URIBL_WS_SURBL') describe URIBL_WS_SURBL Contains a URL listed in the WS SURBL blocklist tflags URIBL_WS_SURBL net score URIBL_WS_SURBL 3.0 Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

ANNOUNCE: SURBL zone file TTLs lowered to 1 hour
by Jeff Chan 13 Aug '04

13 Aug '04

We have lowered the TTLs on SURBL zone files to 1 hour. This includes multi.surbl.org, but does not include sc.surbl.org which already had a 10 minute TTL. This should cause new records to take effect sooner since the negative caching TTL should also be 1 hour. We may reduce TTLs further if we can do some testing and tuning of name server traffic as we adjust TTLs. Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

MEDIA: winnetmag.com 8/12/04 SURBL mention
by Jeff Chan 13 Aug '04

13 Aug '04

Paul Robichaux mentions SURBLs in his winnetmag.com article: http://www.winnetmag.com/Article/ArticleID/43660/Windows_43660.html I wrote to let him know that SURBLs can be used with Exchange through: http://www.2150.com/regexfilter/ with hopefully more applications to follow. Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

Welcoming more public name servers
by Jeff Chan 07 Aug '04

07 Aug '04

We'd like to welcome and thank the addition of more public SURBL name servers administered by: Dirk Bonengel of login-solutions.de James Stahr of berbee.com Without the help of all of our public nameservers and their administrators, SURBLs would not be possible. Our thanks to all! Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

ANNOUNCE: Mail::SpamAssassin::SpamCopURI 0.22
by Eric Kolve 05 Aug '04

05 Aug '04

SpamCopURI 0.22 has been released. This fixes any incompatibilities 2.64 users may have seen when trying to install. 0.22 Thu Aug 5 13:09:15 PDT 2004 - Updated Makefile.pl to support 2.64 and including PerMsgStatus.pm from 2.64 release. Install process now figures out what version you have and installs correct patched version of PerMsgStatus.pm. SpamCopURI now supports both 2.63 and 2.64 version of SA. Package is on both sourceforge and CPAN: http://sourceforge.net/projects/spamcopuri/ --eric

1 0

ANNOUNCE: Mail::SpamAssassin::SpamCopURI 0.21
by Eric Kolve 05 Aug '04

05 Aug '04

Just released SpamCopURI 0.21: 0.21 Wed Aug 4 16:41:31 PDT 2004 - Defaulting config param spamcop_uri_limit to 20. If the number of URLs in a message exceeds the limit, they are shuffled and only up to the number specified for the limit are tested. - New syntax for specifying the address match for multi.surbl.org: Instead of '127.0.0.0/2' use '127.0.0.0+2' this is being done to eliminate any confusion with CIDR syntax. The old '/' syntax is still supported, but will be deprecated in a future version. http://sourceforge.net/projects/spamcopuri/ Package has also been upload to CPAN as well. --eric

1 0

[SURBL-Announce] ANNOUNCE: Additional data sources added to ws.surbl.org
by Jeff Chan 05 Aug '04

05 Aug '04

ws.surbl.org now has some additional data sources included in it: MailSecurity's formerly proprietary SURBL lists, data from Joe Wein's jwSpamSpy Windows POP mail spam-filtering agent, and data from Raymond Dijkxhoorn's Prolocation RBL. Thanks for providing those Joe, MailSecurity and Raymond! Here are some links to more information about those sources: http://www.surbl.org/lists.html#ws http://www.mailsecurity.net.au/ http://www.joewein.de/sw/jwSpamSpy/index.htm http://www.prolocation.net/ jwSpamSpy is a POP3 spam scanner for Windows. jwSpamSpy looks like it should have pretty good spam performance since Joe's URI domain blacklist has a lot of overlap with some of the ws.surbl.org data plus many other quickly added entries as described at: http://www.joewein.de/sw/spam-bl.htm Those new data sources join entries in ws from three SpamAssassin rulesets: Bill Stearns' sa-blacklist, BigEvil.cf from Chris Santerre and his SARE cohorts, and Paul Barbeau's MidEvil.cf. Other manual lists are also included in WS, most of which are being processed and hand-checked by Chris Santerre. ws now has about 30k records, and here are some statistics from Raymond's mail system: SpamAssassin tag hits: (top 100) #1 64675 BAYES_99 #2 54198 HTML_MESSAGE #3 44694 RCVD_IN_SBL+XBL #4 43427 RCVD_IN_BL_SPAMCOP_NET #5 37191 RCVD_IN_SORBS #6 35888 WS_URI_RBL #7 33729 SPAMCOP_URI_RBL #8 33089 MIME_HTML_ONLY #9 32485 OUTBLAZE_URI_RBL #10 26678 RCVD_IN_DSBL #11 19665 RCVD_IN_AHBL #12 19662 RCVD_IN_DYNABLOCK #13 19146 CLICK_BELOW #14 18374 ABUSEBUTLER_URI_RBL WS, SC and OB are detecting roughly the same numbers of spams, though they may be somewhat different spams. Thanks to everyone who is providing data, checking data or otherwise helping with the SURBL project! Please remember to report false positives in SURBLs back to us on the SURBL discussion list or whitelist at surbl dot org http://lists.surbl.org/mailman/listinfo/discuss Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

ANNOUNCE: Mail::SpamAssassin::SpamCopURI 0.20
by Eric Kolve 01 Aug '04

01 Aug '04

Just released SpamCopURI 0.20. Biggest change is support for multi.surbl.org. Let me know if you see anything strange. See the change notes below for what you need to do for your config. 0.20 Sat Jul 31 22:02:20 PDT 2004 - adding max url config param to limit number of URLs checked in an email. Usage (place into .cf file): spamcop_uri_limit 50 Default is unlimited. - adding support for multi.surbl.org / bitmasked results. query results are cached on a per msg basis to prevent additional lookups. Modify your configuration to look like the following for sc.surbl.org: uri SPAMCOP_URI_RBL eval:check_spamcop_uri_rbl('multi.surbl.org','127.0.0.0/2') describe SPAMCOP_URI_RBL URI's domain appears in spamcop database at sc.surbl.org tflags SPAMCOP_URI_RBL net ws.surbl.org would look like this: uri WS_URI_RBL eval:check_spamcop_uri_rbl('multi.surbl.org','127.0.0.0/4') describe WS_URI_RBL URI's domain appears in ws database at ws.surbl.org tflags WS_URI_RBL net - Removed configuration params: spamcop_uri_src and spamcop_uri_path since these should never be used anymore. - added cleanup for hosts that come in with a dot in front of of the host (e.g. http://.spammy-site.org) http://sourceforge.net/projects/spamcopuri/ --eric

1 1

[SURBL-Announce] ANNOUNCE: How to report false positives in ph anti-phishing list to MailSecurity
by Jeff Chan 28 Jul '04

28 Jul '04

We've updated the SURBL Lists document to add information about how to contact MailSecurity with reports about false positives in ph, the anti-phishing list included (only) in multi.surbl.org: http://www.surbl.org/lists.html#ph "Please report false positives on the ph list to: postmaster at corp.mailsecurity.net.au. Be sure to include supporting reasons explaining why the domain should not be listed." Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

← Newer
1
...
11
12
13
14
15
16
17
18
19
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Announce