Kevin Gilbertson reports that he has been using SURBLs for "about
a year now" to protect his popular redirection site TinyURL.com
from abuse by spammers and phishers.
TinyURL joins MetaMark Shorten and SnipURL in using SURBLs to
protect their redirection services.
Thank you to all of them for taking this important step to
prevent abuse of their services. If you know of any other
redirection services who might benefit similarly, please point
them to our "Open Letter To Operators Of Redirection Sites"
at:
http://www.surbl.org/redirect.html
Cheers,
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
Between about 11:00 and 13:00 UTC there was a glitch on my new
engine's whitelist processing where an inadvertent blank line in
a manual whitelist broke the whitelisting. As a result some
legitimate domains were briefly blacklisted. They are now
properly excluded from blacklisting. For those with long
memories, this happened with the old engine once also. I've
since added a sed -e '/^$/d' to prevent this from happening with
the new engine also. Thank you to those who brought this to my
attention.
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
The data in be.surbl.org, originally from Chris Santerre's
BigEvil SpamAssassin ruleset, is stale and has been superceded by
ws.surbl.org for a long time now, so we will be shutting down DNS
service for it in one month, at the end of November.
Please update your configurations to use multi.surbl.org
(strongly preferred) or ws.surbl.org instead.
http://www.surbl.org/lists.html
This change should only be necessary for folks who manually
configured their applications to use be.surbl.org. Default
installations of SpamAssassin and other SURBL-using applications
should be using multi and the appropriately encoded lists
already.
Cheers,
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
We have made the experimental SC2 data into the production SC
list. The new version has been tested to catch about 10% more
spam than the old version with no significant increase in false
positives.
Along with this change is the use of a new data engine which has
a shorter cycle time of 5 minutes, and a cleaner, more uniform
design and handling of data. This should reduce the overall
latency of new additions to the lists by many minutes.
Other resulting changes which may be of minor interest:
1. The list of lists hit for a given TXT record are now in
alphabetical order, e.g.:
Blocked, a-pill-MUNGED.com on lists [ab][jp][ob][sc][ws], See: http://www.surbl.org/lists.html
where before they were in bitmask or historical order.
2. Everyone should be using multi.surbl.org now and not the
individual lists, but the zone file serial numbers are now
synchronized so that multi will have the same serial number as
the most recently updated lists, e.g.:
ab.surbl.orgob.surbl.orgsc.surbl.orgws.surbl.orgmulti.surbl.org
1130799782 1130801582 1130799782 1130797982 1130801582
where ob was the only list updated in the most recent cycle
above, so ob and multi have the same serial number. In a
previous cycle, ab and sc were both updated at Unix (C) time
1130799782 and multi then would have shared that serial number,
etc.
Follow-ups, questions, comments, etc. to discuss@ lists.surbl.org
Cheers,
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
We'd like to welcome and thank the addition of a new public
SURBL name server n3.surbl.org administered by:
Niek Baakman from The Netherlands
Without our public nameservers and the help of their
administrators, SURBLs would not be possible.
Our thanks to Niek and all of them!
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
We'd like to welcome and thank the addition of a new public
SURBL name server m3.surbl.org administered by:
Brad Anderson of Habeas
Without our public nameservers and the help of their
administrators, SURBLs would not be possible.
Our thanks to all of them!
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
We'd like to welcome and thank the addition of a new public
SURBL name server d1.surbl.org administered by:
Wim Biemolt of SURFnet bv
Without our public nameservers and the help of their
administrators, SURBLs would not be possible.
Our thanks to all of them!
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
We'd like to welcome and thank the addition of a new public
SURBL name server a3.surbl.org administered by:
Michele Neylon of blacknight.ie
Without our public nameservers and the help of their
administrators, SURBLs would not be possible.
Our thanks to all of them!
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
From: Erik Mugele
Date: Sunday, May 1, 2005, 6:54:04 PM
Subject: Exim/SURBL Script Problems
I introduced an error into the last version of the SURBL Perl script
for Exim. The error didn't have anything to do with the whitelisting
but was a result of me messing with the code.
In short, only the fully qualified domain was being checked and
nothing else. So, for example, if the URL was http://www.teuton.orgwww.teuton.org was the only thing being checked but not teuton.org. I
noticed this when several pieces of spam slipped in.
This problem was introduced in version 1.1 when I added whitelisting
and I have released version 1.2 to fix the problem.
Web page has been updated:
http://www.teuton.org/~erik/docs/exim_surbl.shtml
Erik
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/