Discuss October 2004

discuss@lists.surbl.org

44 participants
134 discussions

Possible FP @ WS
by Bitz 03 Oct '04

03 Oct '04

phonehog . com 0 in SBL. Few sightings in NANAS, possibly due to their referral program. Domain was created on: 15-Dec-99 and does offer free long distance calls to their subscribers (i don't know what is the catch). The site looks legit and should be whitelisted, I think ;-) Jeff, I'm sending you a copy of the message off-list. Regards, -b.

2 1

FP?
by Bitz 03 Oct '04

03 Oct '04

Hello, The following domains are listed at WS, there were sightings in NANAS, some says poetry . com is a total scam :-) cellular-parts . com Created on: 30-Jul-98 poetry . com Created on 15-Oct-1996 We have customers who are actively subscribed to their lists. But just wanted to get everyones opinion whether these 2 should be whitelisted. Thanks, -b.

3 5

FP on WS
by Bill Landry 03 Oct '04

03 Oct '04

Listed on WS: e-cost.com Record created on 16-Jun-1998 NANAS hits: None after Aug-03 SBL listing: No listing Looks like they have a legitimate subscription/unsubscription process. Bill

3 2

fp?
by Bitz 02 Oct '04

02 Oct '04

sacredpages . com - Record created on 13-Dec-2001 Listed at WS, they have legit uses so I think they should be whitelisted. Regards, b-

2 3

Possible FP
by Bitz 02 Oct '04

02 Oct '04

X-Spam-Status: No, hits=5.0 required=10.0 tests=WS_URI_RBL=5 cellular4free . com No hits from Google/NANAS

3 6

419 for school???
by Chris Santerre 01 Oct '04

01 Oct '04

I don't get his one at all!!! WTH??? I'm CC'ing to SURBL because look at the MX for this domain! uniprepacademy.com dns_mx: neti-outblaze-com.mr.outblaze.com neti-outblaze-com-bk.mr.outblaze.com I know it didn't come form that domain, but the advertised part of this email points to that domain. I'm guessing this is just an email to try to harvest addresses from people who reply? ____________________________________________________________ Received: from hotmail.com (bay19-f20.bay19.hotmail.com [64.4.53.70]) by moglobal.com (8.12.5/8.12.5) with ESMTP id i91FRj7K002969 for <csanterre(a)MERCHANTSOVERSEAS.COM>; Fri, 1 Oct 2004 11:27:49 -0400 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Fri, 1 Oct 2004 07:50:06 -0700 Received: from 216.139.176.61 by by19fd.bay19.hotmail.msn.com with HTTP; Fri, 01 Oct 2004 14:49:01 GMT X-Originating-IP: [216.139.176.61] X-Originating-Email: [estherekii17(a)hotmail.com] X-Sender: estherekii17(a)hotmail.com Reply-To: esthereki17(a)indiatimes.com From: "Esther Eki" <estherekii17(a)hotmail.com> Bcc: Subject: Greeting to you Date: Fri, 01 Oct 2004 09:49:01 -0500 Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: <BAY19-F20hqiTPuUMMA00032335(a)hotmail.com> X-OriginalArrivalTime: 01 Oct 2004 14:50:06.0052 (UTC) FILETIME=[F09E5240:01C4A7C5] X-Spam-Checker-Version: SpamAssassin 3.0.0 (2004-09-13) on mail X-Spam-Level: **** X-Spam-Status: No, score=4.3 required=5.0 tests=FROM_ENDS_IN_NUMS, RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SBL,SARE_TOCC_NONE,SARE_TOWRITE autolearn=disabled version=3.0.0 Hello, I am happy to write you this letter, to me it took a lot of time before I decided to write you, I am just 17 years old and I lost both parents in a ghastly motor accident last year and since then, I have been staying with my Aunty, but of recent she has been persuading me to go into prostitution rather than going to school to further my education. But I dissappointed her by refusing not to go into prostitution and that made her not to assist me in obtain my school's scholarship , I begged her for her assistance so I can resume school, but she refused and said that would be the punishment for me to disobey her, now I am in a situation for me to obey her but I don't want to, the only way for me to free my self from this situation, is for me to be able to pay my school fees so that I will leave her house, and I am also applying for a scholarship that would help me with my tuition, accomodation and all the expenses that I would need to pay while in school. Because by the time I my school fees, I will move away from her house and resume school and start staying in the school's dormitory and that would keep her away from me, and I won't have to be persuaded to go into such bad thing, presently I am in my final year at University Preparatory Academy, Jos, Plateau State and all fees goes directly to the school. But the problem I am having now is how do I get my school fees paid, and thats the reason I decided to write you for your assistance, someone that would take me as a sister and give me good advise and support in prayers and I am also praying to God to bless me, and thats while I decided to write you, to know if you can contact the school on my behalf and also help me beg them for the scholarship which I applied for, so I can resume school as soon as possible, God bless you and your humble family. Please if you want to contact the school, this is the address The Principal University Preparatory Academy Jos Pleateau State principal(a)uniprepacademy.com I hope to hear from you soon. Yours Esther Eki

4 3

Postfix pre-queue filter
by Yves Junqueira 01 Oct '04

01 Oct '04

Hi, I've just uploaded to sourceforge the first version of a spamvertised URIs pre-queue filter for Postfix. It's simple and effective. It will analyse the message before it enters the queue and, in case of a listed url, it will REJECT the message and the sending client will take the proper actions. http://prdownloads.sourceforge.net/pf-aux/suriproxy-0.8.tar.gz?download See the readme file for instructions. I can't assure how stable it is at the momment, that's why I am asking some feedback. What do you think? -- Yves Junqueira http://www.lynx.com.br

3 3

Help classify quickinspirations.com
by Chris Santerre 01 Oct '04

01 Oct '04

quickinspirations.com Thoughts on this guy? 48 NANAS hits. Listed in dnsbl.njabl.org Didn't we already classify this? I wonder if we can get a crossref lookup of the global whitelist, so we can see what has already been whitelisted. I belive this is a spammer in sheeps clothing. But it fools people into signing up for a stupid inspiration newsletter. But the subjects of the newsletter are stuff like: Subject: Get a Credit Report Instantly! Then a inspiration quote, then a big ad. I think we may see more of this in the future. I think it is a UC candidate. Do we have enough listed in UC for testing yet? Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

8 21

RE: [SURBL-Discuss] Help classify quickinspirations.com
by Chris Santerre 01 Oct '04

01 Oct '04

>-----Original Message----- >From: Patrik Nilsson [mailto:patrik@patrik.com] >Sent: Thursday, September 30, 2004 4:55 PM >To: SURBL Discussion list >Subject: RE: [SURBL-Discuss] Help classify quickinspirations.com > > >At 09:25 2004-09-30 -0700, Bret Miller wrote: >> > quickinspirations.com >> >>When this one came up here, every person who received it classified it >>as spam when I asked and so it remains that in my mind. > >And I still haven't seen any response actually arguing a real >reason why >quickinspirations.com should be whitelisted. > >We're not just whitelisting domains because someone, who doesn't even >bother to argue why, asks us to, do we? > >"This is reported as spam, looks like spam and smells like >spam, but we >will whitelist it just because it might be caught by other >antispam systems >anyway" isn't a very convincing argument. > ^LOL^ Oh I'm not comenting in that one ;) I'll let Jeff explain it, because I still don't understand this one. --Chris

3 2

RE: [SURBL-Discuss] 419 for school???
by Chris Santerre 01 Oct '04

01 Oct '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Friday, October 01, 2004 12:20 PM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] 419 for school??? > > >On Friday, October 1, 2004, 9:11:29 AM, Chris Santerre wrote: >> I don't get his one at all!!! WTH??? > >> I'm CC'ing to SURBL because look at the MX for this domain! > >> uniprepacademy.com dns_mx: >> neti-outblaze-com.mr.outblaze.com >> neti-outblaze-com-bk.mr.outblaze.com > >> I know it didn't come form that domain, but the advertised >part of this >> email points to that domain. I'm guessing this is just an >email to try to >> harvest addresses from people who reply? > >Harvest or Joe Job are always possible. > > >You may want to forward to postmaster(a)outblaze.com > >They don't put up with crud and will smack hard any abusers. > >Worst case they send Chris "The Leg Breaker" Santerre after >them. ;-) > I just sent it to them. What can I say, 6 foot, 235+ pounds, in an all out sprint on the ice..... I'd be glad for any spammer to be on the ice with me ;) --Chris (Come on ref, I hardly elbowed him at all!)

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2004