Discuss July 2004

discuss@lists.surbl.org

65 participants
151 discussions

Submissions to SURBL list thru SARE website.
by Chris Santerre 08 Jul '04

08 Jul '04

Good grief. Let me say this slowly.... SURBL is for domains in LINKS, URLS, websites, images, things you click on, images hosted in the email. SURBL is NOT, will never be used, doesn't care, /dev/null's, any domain or IP the email came from. Thanks, I feel better now. Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

4 3

Re: blacklist for notlong.com
by William Stearns 08 Jul '04

08 Jul '04

Good afternoon, Eric, On Thu, 8 Jul 2004, Eric Hammond wrote: > William Stearns wrote: > > I have a sense we could help _you_. When a user requests a > > notlong url, would you consider checking the target URL against the > > sa-blacklist, by [...] (Just for reference, surbl list, I suggested checking against either the static domain list or with dns lookups against surbl) > This sounds like a great idea. In fact, I heard about your service > by noticing that another URL shortening service run by a friend > (metamark.net) does check with SURBL. I'm sincerely glad to hear that! Please check back with us if we can help with the implementation. Cheers, - Bill --------------------------------------------------------------------------- Too many packets Syn. Ack. Fin. I. C. M. P. I am so tired -- Dennis McGrath -------------------------------------------------------------------------- William Stearns (wstearns(a)pobox.com). Mason, Buildkernel, freedups, p0f, rsync-backup, ssh-keyinstall, dns-check, more at: http://www.stearns.org --------------------------------------------------------------------------

1 0

RE: [SURBL-Discuss] Help with SpamCopURI-0.18
by Mitch Planck 08 Jul '04

08 Jul '04

> I've been trying to get SpamCopURI-0.18 working on my system and > I've run into many problems. First I had to install > LWP::UserAgent, which > kept failing until I got everything it needed installed; > after everything > was installed I re-did the SpamCopURI-0.18 install. > > All tests were "ok" but when I copy over the spamcopuri.cf > file I get this > from spam assassin: > > Failed to parse line in SpamAssassin configuration, skipping: > open_redirect_list_spamcop_uri xurl.us > Failed to compile URI SpamAssassin tests, skipping: > (syntax error at /etc/mail/spamassassin/spamcop_uri.cf, rule > SPAMCOP_URI_RBL, line 1, near "eval:" > > I tried searching the archive for support on this, but I only > found one > person posted this problem with no replies. > > Can anyone shed some light onto this? I'm guessing I'm missing a PERL > Module somewhere but I don't know which one. > > Thanks, > Steve > Hi Steve, Can you let us know what flavor Linux you are running, what version of perl & SA, and how you are trying to install? For example, I use FreeBSD, then use the ports collection for everything in that, but since it doesn't have SpamCopURI, I could either use the CPAN install or the standard download, make, make install, etc. I use the wrapper program amavisd-new as well with a postfix mail server, so I have to integrate my SA/SpamCop install into amavis and that gave me some headaches, but maybe an uninstall & reinstall of the latest version of SA, make sure other things are up to date too. >From the source, here are the needed modules in perl: use URI; use URI::QueryParam; use URI::Escape use Text::Wrap (); use Mail::SpamAssassin::EvalTests; use Mail::SpamAssassin::SpamCopURI; use Mail::SpamAssassin::AutoWhitelist; use Mail::SpamAssassin::HTML; use Mail::SpamAssassin::Conf; use Mail::SpamAssassin::Received; use Mail::SpamAssassin::Util; use Mail::SpamAssassin::NetSet; There may be others needed, but these are obviously needed. Best regards, Mitch Planck ias.net

2 1

RE: [SURBL-Discuss] Help with SpamCopURI-0.18
by Steve Dimoff 08 Jul '04

08 Jul '04

>Hi Steve, >Can you let us know what flavor Linux you are running, what version of perl >& SA, and how you are trying to install? Mitch, I'm running Gentoo Linux sparc (2.4.24-sparc-r2), This is perl, v5.8.2 built for sparc-linux, SA 2.63. I tried both CPAN install and source install. Neither of them run. I installed the SpamCopURI on a Linux Redhat box with SA 2.63 and it works just fine. So I was thinking it was a perl module problem. Thanks, Steve >From the source, here are the needed modules in perl: Hmmm I'll check to make sure those are all install.

1 0

Help with SpamCopURI-0.18
by Steve Dimoff 08 Jul '04

08 Jul '04

Hello, I've been trying to get SpamCopURI-0.18 working on my system and I've run into many problems. First I had to install LWP::UserAgent, which kept failing until I got everything it needed installed; after everything was installed I re-did the SpamCopURI-0.18 install. All tests were "ok" but when I copy over the spamcopuri.cf file I get this from spam assassin: Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri snurl.com *.snurl.com Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri snipurl.com *.snipurl.com Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri tinyclick.com *.tinyclick.com Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri babyurl.com *.babyurl.com Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri lin.kz *.lin.kz Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri *.v3.net Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri shorl.com *.shorl.com Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri tinyurl.com *.tinyurl.com Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri xurl.us Failed to compile URI SpamAssassin tests, skipping: (syntax error at /etc/mail/spamassassin/spamcop_uri.cf, rule SPAMCOP_URI_RBL, line 1, near "eval:" I tried searching the archive for support on this, but I only found one person posted this problem with no replies. Can anyone shed some light onto this? I'm guessing I'm missing a PERL Module somewhere but I don't know which one. Thanks, Steve

1 0

RE: [SURBL-Discuss] Help: kid pron.....help report
by Chris Santerre 08 Jul '04

08 Jul '04

Roger, you wern't the only one. Page got less then halfway and I stopped it. Being a father of 2 it made me sick and angry. I reported it using www.missingkids.com 'cybertip line' . THis is where the trail ends. (FBI says call customs, customs says to call this number, number says to go here and this report gets sent out to all agencies. Whew! I hope they nail them to a wall. (Or let me in a room with them for 5 minutes!) --Chris >-----Original Message----- >From: Roger WJ Alterskjær [mailto:roger.alterskjaer@vm.ntnu.no] >Sent: Wednesday, July 07, 2004 9:24 AM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] Help: kid pron.....help report > > >Wow! >I couldn't stomach letting the entire page load. I've reported >this site >to the Norwegian computer crime division. With regards to >child-pornography, they have investigative units that co-operate >internationally with other such law-enforcement organizations. >(That way >they can synchronize raids on child-porno rings on an large >geographical >basis!) > >Let's hope they get them! > >--- >Regards, >Roger WJ Alterskjær >IT Consultant >Museum of Natural History and Archaeology, NTNU >(+47) 73 59 79 78 > >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss >

2 1

RE: [SURBL-Discuss] Another list to test: ab.surbl.org
by Joseph Burford 08 Jul '04

08 Jul '04

Hi Chris, > Joseph, I'm running sa-stats which only pulls out the > numbers, what do you use to parse out the info you posted? On my test box I'm running MailScanner + SpamAssassin and a utility for MailScanner called MailWatch. Essentially this throws all the data from each message into a MySQL database and provides a php frontend. I've just made up a few php scripts to create summaries by pulling relevant log details from the MySQL db. Looking at the SURBL stats, the messages that are in the end marked HAM are borderline. Some of them are postmaster bounces or postmaster messages from other servers I maintain, others are questionable mailing lists or even spam sent via yahoo groups. >From my look into the "false positives" of the SURBL lists there's hardly a message that wouldn't be missed if it hit the bit bucket. Regards, Joseph

1 0

RE: [SURBL-Discuss] 20 hours of 6DOS
by Joseph Burford 08 Jul '04

08 Jul '04

> So please test the new lists and let us know the results. 06/07/2004 - 3,269 message 1,593 marked as spam (48.7percent) Description Total Ham % Spam % URL in ob.surbl.org 756 7 0.9 749 99.1 URL in sc.surbl.org 667 1 0.1 666 99.9 URL in ws.surbl.org 590 2 0.3 588 99.7 URL in ab.surbl.org 469 1 0.2 468 99.8 URL in ds.surbl.org 140 2 1.4 138 98.6 07/07/2004 - 3,556 messages 1,822 marked as spam (51.2 percent) Description Total Ham % Spam % URL in ws.surbl.org 906 10 1.1 896 98.9 URL in ob.surbl.org 830 3 0.4 827 99.6 URL in sc.surbl.org 698 7 1 691 99 URL in ab.surbl.org 499 7 1.4 492 98.6 URL in ds.surbl.org 145 5 3.4 140 96.6

1 0

RE: [SURBL-Discuss] Freakin spanish and portuguese!
by Chris Santerre 07 Jul '04

07 Jul '04

Thanks Mariano, contacting you was next on my list. I'm having a hard time figuring out these submissions. A lot of the sites won't come up for me to check, I'm not sure why. I'll gather my thoughts and email you. Also thanks Jose Marcio Martins da Cruz. I'll email you as well off list. And if you're portuguese, like my wife, then you have my condolances. Maybe we should add all of Greece's emails to the blacklist? ;) Benfica! --Chris (Yeah its not hockey, but its ok.) >-----Original Message----- >From: Mariano Absatz [mailto:surbl@lists.com.ar] >Sent: Tuesday, July 06, 2004 6:07 PM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] Freakin spanish and portuguese! > > >El 6 Jul 2004 a las 16:37, Chris Santerre escribió: > >> Can anyone here read spanish or portuguese? I got loads of >surbl submisions >> that I can't understand for the life of me!! ARGH! > >Hi Chris... I read/speak Spanish (and can read Portuguese with >quite some >difficulty)... in fact, if you're referring to postings in >http://www.rulesemporium.com/cgi-bin/uribl.cgi I'm responsible >for quite a >few postings in Spanish (I put my real name and my personal >-and very abused- >e-mail address in the form). > >Since I do know lots of spam from Argentina are spreading >around the world >I'd very much like that to be detected. Feel free to contact >me off-list (to >this address or to baby(a)baby.com.ar) about any doubt you may >have... I don't >have spare cycles, but I'd be happy to help you with anything I can. > >Regards. > > > >-- >Mariano Absatz >El Baby >---------------------------------------------------------- >You've got the brain of a four-year-old boy, >and I'll bet he was glad to get rid of it. > -- Groucho Marx > > >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss >

3 2

Freakin spanish and portuguese!
by Chris Santerre 07 Jul '04

07 Jul '04

Can anyone here read spanish or portuguese? I got loads of surbl submisions that I can't understand for the life of me!! ARGH! Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

3 2

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2004