Discuss October 2004

discuss@lists.surbl.org

44 participants
134 discussions

Nice policy! Adding to UC not WS.
by Chris Santerre 25 Oct '04

25 Oct '04

I have an SURBL submission from a VERY reputible person. With a very good explanation as to how the email address spam'd should NEVER have gotten this email. Now according to WS policy it would NOT be listed because it may have legit uses. Therefore I'm adding it to UC not WS. zatz.com is the domain. http://zatzhq.zatz.com/privacy Pretty much says it will do whatever it wants with your address. Which in this case was harvested, not OptIn. And After trying to unsub the address, the spam floodgates opened for it. Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

2 1

RE: [SURBL-Discuss] Surbl Headers?
by Thomas Kinghorn 25 Oct '04

25 Oct '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Surbl Headers? >where OB_URI_RBL is the default name of a SURBL rule. Will >that work for you? If not you may be able to use exim or some >other mail processing utility to look for headers like that and >add other headers more to your liking. >Jeff C. Thanks Jeff. I am looking along the lines at, for example, X-SURBL-TAG: URL:http://www.blahblah.tld found in XX.surbl.org. Will look at exim for this. Many thanks for the pointer. Regards Tom

4 3

Surbl Headers?
by Thomas Kinghorn 25 Oct '04

25 Oct '04

Apologies for the previous message with no Subject : Mondays :o$ Good morning List. I was wondering if it is possible to add a header In the message indicating which surbl rule was triggered? If yes, how? I have seen it done via a message a stamp using MailMarshal & ASTPS. I am using Exim, sa-exim and SpamAssassin. All are the latest stable releases. Many thanks Regards, Tom

2 1

(no subject)
by Thomas Kinghorn 25 Oct '04

25 Oct '04

Good morning List. I was wondering if it is possible to add a header In the message indicating which surbl rule was triggered? If yes, how? I have seen it done via a message a stamp using MailMarshal & ASTPS. I am using Exim, sa-exim and SpamAssassin. All are the latest stable releases. Many thanks Regards, Tom

1 0

RE: [SURBL-Discuss] free host: greatnow.com
by Chris Santerre 25 Oct '04

25 Oct '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Friday, October 22, 2004 2:18 PM >To: Chris Santerre >Cc: 'Jeff Chan'; SURBL Discussion list (E-mail) >Subject: Re: [SURBL-Discuss] free host: greatnow.com > > >On Friday, October 22, 2004, 11:00:56 AM, Chris Santerre wrote: >> I thought we had a discussion on this already? The list I >added has been in >> there for like 2 months. I went thru it. I do NOT use this >guys list nilly >> willy. I haven't updated that file in 2 months. I only took >his 100 recent >> changes, and went thru it and pulled a bunch out that were >in question. > >This was the most recent discussion I could find. It doesn't >seem to mention actually using the jayallen data in WS, though I >might have missed a message: > Fine. Removed. A known blog spammer host gets one FP and we remove then all. Done. --Chris

2 4

Fwd: Re: [SURBL-Discuss] Re: Non-SA URIBLs no longer hitting with SA 3.0.1
by Jeff Chan 25 Oct '04

25 Oct '04

This is a forwarded message From: Burnie <burnie(a)dod.no> To: users(a)spamassassin.apache.org Date: Sunday, October 24, 2004, 2:16:08 PM Subject: [SURBL-Discuss] Re: Non-SA URIBLs no longer hitting with SA 3.0.1 ===8<==============Original message text=============== "Bill Landry" <billl(a)pointshare.com> writes: > urirhssub URIBL_JP_SURBL multi.surbl.org. A 64 > header URIBL_JP_SURBL eval:check_uridnsbl('URIBL_JP_SURBL') ^^^^^^ Change this to 'body' (Just found this myself. Thanks for the input) >From Changelog: --------- r54022 | felicity | 2004-10-07 22:21:30 +0000 (Thu, 07 Oct 2004) | 1 line bug 3734: uridnsbl rules work on body data, not header data, so change the rule type from header to body --------- -- Bernt 'Burnie' Pettersen /// DoD#2345 NAF <E-mail:burnie@dod.no> /// <URL:http://burnie.sh/> Well, actually I couldn't find a better signature here..... ===8<===========End of original message text===========

2 1

Re: [SURBL-Discuss] Re: Non-SA URIBLs no longer hitting with SA 3.0.1
by Bill Landry 24 Oct '04

24 Oct '04

----- Original Message ----- From: "Burnie" <burnie(a)dod.no> > "Bill Landry" <billl(a)pointshare.com> writes: > > > urirhssub URIBL_JP_SURBL multi.surbl.org. A 64 > > header URIBL_JP_SURBL eval:check_uridnsbl('URIBL_JP_SURBL') > ^^^^^^ > > Change this to 'body' > > (Just found this myself. Thanks for the input) > > >From Changelog: > --------- > r54022 | felicity | 2004-10-07 22:21:30 +0000 (Thu, 07 Oct 2004) | 1 > line > > bug 3734: uridnsbl rules work on body data, not header data, so change > the rule type from header to body > --------- Thanks Burnie, that was it. I even saw this in the changelog file when I did the upgrade a couple of days ago, but totally forgot about it when trying to resolve this today. Bill

1 0

Re: Non-SA URIBLs no longer hitting with SA 3.0.1
by Raymond Dijkxhoorn 24 Oct '04

24 Oct '04

Hi! >> The first two are typically very heavy hitters for me, so to see no hits >> since the upgrade is strange. Is anyone else that has upgrade to SA 3.0.1 >> seeing the same results? > Make sure the plugin is loaded in init.pre. Also, try sending a test message > (see the SURBL web site or this list's recent archives for details) while > running SA in debug mode to confirm whether the checks are really being > skipped. They are, 100%, all other URIBL checks are just processed ok, ones that i have inside my local.cf are skipped. Bye, Raymond.

2 6

Re: Non-SA URIBLs no longer hitting with SA 3.0.1
by Bill Landry 24 Oct '04

24 Oct '04

----- Original Message ----- From: "Sahil Tandon" <sahil(a)hamla.org> > > The first two are typically very heavy hitters for me, so to see no hits > > since the upgrade is strange. Is anyone else that has upgrade to SA 3.0.1 > > seeing the same results? > > Make sure the plugin is loaded in init.pre. Also, try sending a test > message (see the SURBL web site or this list's recent archives for > details) while running SA in debug mode to confirm whether the checks > are really being skipped. All SA defined URIBL tests are working fine, it just the ones that I have defined personally in a uribl.cf file in /etc/mail/spamassassin that are not working. These all worked fine with all of the SA 3.0.0 release candidates and with the 3.0.0 release, however, they are not working now since the upgrade to SA 3.0.1. BTW, in my /etc/mail/spamassassin/init.pre: # URIDNSBL - look up URLs found in the message against several DNS # blocklists. # loadplugin Mail::SpamAssassin::Plugin::URIDNSBL I even tried renaming my file to urisbl.bak and adding them directly to the SA 25_uribl.cf file, and they still do not work. Very strange... Bill

2 1

Non-SA URIBLs no longer hitting with SA 3.0.1
by Bill Landry 24 Oct '04

24 Oct '04

The last hit I've seen from any of the following privately defined URIBL lists was Oct 22 21:09:04, which is when I upgraded to SA 3.0.1: ===== urirhssub URIBL_JP_SURBL multi.surbl.org. A 64 header URIBL_JP_SURBL eval:check_uridnsbl('URIBL_JP_SURBL') describe URIBL_JP_SURBL Contains a URL listed in the JP SURBL blocklist tflags URIBL_JP_SURBL net score URIBL_JP_SURBL 4.0 urirhsbl URIBL_MP block.rhs.mailpolice.com. A header URIBL_MP eval:check_uridnsbl('URIBL_MP') describe URIBL_MP Contains a URL listed in the MP SURBL blocklist tflags URIBL_MP net score URIBL_MP 2.0 urirhsbl URIBL_UC uc.sasknow.com. A header URIBL_UC eval:check_uridnsbl('URIBL_UC') describe URIBL_UC Contains a URL listed in the UC SURBL blocklist tflags URIBL_UC net score URIBL_UC 0.5 ===== The first two are typically very heavy hitters for me, so to see no hits since the upgrade is strange. Is anyone else that has upgrade to SA 3.0.1 seeing the same results? Bill

2 2

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2004