Discuss February 2005

discuss@lists.surbl.org

36 participants
47 discussions

rsync
by Adam Bayless 09 Feb '05

09 Feb '05

I've got a pretty busy mail system (about 600k messages a day) so I sent an rsync request earlier this week but I haven't heard back yet. I also sent subscription requests on the announce and zones mailing lists and haven't heard anything on those. All of these requests came from support(a)fiber.net. If anyone can offer some advice it will be greatly appreciated. Thanks! -Adam

2 1

Re: Open redirector @yahoo
by Terry Sullivan 09 Feb '05

09 Feb '05

Raymond Dijkxhoorn wrote: >Obviously open redirectors like this are not really handy. >Well, for spammers they are, but ... > >Anyone with contacts at Yahoo? Based on conversations I've had, Yahoo is aware of this issue, but they believe (or at least profess) that there are one or more compelling reasons to leave these services active. Of course, it's a trivial thing to ignore redirectors completely simply by parsing URLs back-to-front, instead of front-to-back.

2 1

rule for mixed case URI scheme
by Daniel Quinlan 09 Feb '05

09 Feb '05

Something close to this will be in 3.1, so you'll want to remove the rule then, maybe name it something else too. uri URI_SCHEME_MIXED_CASE /^(?![a-z]{3,6}:|[A-Z]{3,6})[A-Za-z]{3,6}:\// describe URI_SCHEME_MIXED_CASE URI scheme has mixed uppercase and lowercase The mass-check results are good, hits about 1% of spam with basically no false positives in 92,000 hams from 6 people. Daniel -- Daniel Quinlan http://www.pathname.com/~quinlan/

2 2

Reminder: JP out of WS
by Jeff Chan 08 Feb '05

08 Feb '05

We have taken the JP data out of WS. If you don't already have a rule or configuration to use the JP data, please add one. Some sample rules for SA are at: http://www.surbl.org/quickstart.html (When you upgrade to SA 3.1, it will ship with a separate rule for JP, so you may need to remove the custom JP rule you add for versions before 3.1.) A good reason to use JP separately is that it hits on a lot of spam and has a low FP rate. Here are some results from Raymond's systems: SpamAssassin tag hits: (top 100) #1 149058 URIBL_JP_SURBL #2 147873 URIBL_SBL #3 134187 URIBL_OB_SURBL #4 117296 HTML_MESSAGE #5 115780 BAYES_99 #6 111612 RCVD_IN_BL_SPAMCOP_NET #7 103114 URIBL_WS_SURBL #8 98778 URIBL_SC_SURBL #9 70540 MIME_HTML_ONLY #10 57549 URIBL_AB_SURBL #11 43752 URIBL_AH_DNSBL #12 35201 RCVD_IN_XBL #13 32712 RCVD_IN_NJABL_PROXY #14 31342 DRUGS_ERECTILE #15 29829 RCVD_IN_SBL #16 29205 RCVD_IN_SORBS_SPAM #17 27917 RCVD_IN_SORBS_WEB #18 27787 RATWARE_ZERO_TZ #19 27301 MIME_BASE64_TEXT #20 26780 MIME_BOUND_DD_DIGITS Jeff C. -- "If it appears in hams, then don't list it."

1 0

surbl and spamassassin questions
by Dave Harris 08 Feb '05

08 Feb '05

hi, i am a sysadmin at a small isp and have several questions to ask. please bear with me, my questions are probably very basic. i have implemented spamassassin 3.x and want to activate surbls. our mailserver is running on RH linux with sendmail/open webmail, as well as pop clients. 1. how do i tell if Net::DNS is installed? 2. how do i make sure "network tests" are enabled? 3. how do i tell if "Mail::SpamAssassin::Plugin::URIDNSBL" is present and loaded? if it isn't present by default, i think i found the URIDNSBL plugin code on the surbl.org site but i don't know how to install it. 4. what needs to be done in the /etc/mail/spamassassin/local.cf file to get surbls working? 5. how can i tell if surbl is working once everything is in place? ------------------------------- i'm sure these are all very basic setup issues but to me, i'm at a bit of a loss. any help is greatly appreciated. tia, dave ______________________________________________________________________ Post your free ad now! http://personals.yahoo.ca

3 3

MISC: Humor
by Chris Santerre 07 Feb '05

07 Feb '05

Interesting cartoon in my inbox this early Monday morning. http://tinyurl.com/62tlr Made me laugh, then made me sad :) :( Chris Santerre System Admin and SARE/SURBL Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

1 0

Open redirector @yahoo
by Raymond Dijkxhoorn 07 Feb '05

07 Feb '05

Hi! Currently Yahoo is putting this URL (with another target URL naturally) in their messages... : http://uk.rd.yahoo.com/mail/taglines/hotmail_com/storage/*http://www.surbl.… Obviously open redirectors like this are not really handy. Well, for spammers they are, but ... Anyone with contacts at Yahoo? Tried mailing them but with no luck so far. Bye, Raymond.

1 0

RE: [SURBL-Discuss] John Delisle/ho/Ceridian is out of the office .
by Chris Santerre 06 Feb '05

06 Feb '05

>-----Original Message----- >From: John_Delisle(a)ceridian.ca [mailto:John_Delisle@ceridian.ca] >Sent: Monday, January 31, 2005 10:01 PM >To: SURBL Discussion list >Subject: [SURBL-Discuss] John Delisle/ho/Ceridian is out of the office. > > >I will be out of the office starting 01/31/2005 and will not >return until >02/01/2005. > >Sorry, I'm away on course. If you require assistance, please >see the NAS >team, or Service Desk. I'll be back Friday. 2/1/05 is a Monday! You are very confused aren't you! :) --Chris

6 6

Fwd: Out of Office AutoReply: [SURBL-Discuss] Re: John Delisle/ho/Ceri dian is out of the office
by Jeff Chan 05 Feb '05

05 Feb '05

ROTFL, I know I shouldn't forward off list mail, but.... __ This is a forwarded message From: Nick Askew <n.askew(a)publitec.nl> To: Jeff Chan <jeffc(a)surbl.org> Date: Saturday, February 5, 2005, 12:31:52 AM Subject: Out of Office AutoReply: [SURBL-Discuss] Re: John Delisle/ho/Ceri dian is out of the office Hi >From the 5th I'll be out of the office for two weeks. Nick __ People, please do NOT have your autoreplies go to list addresses. Jeff C.

1 0

blocked, but still getting through?
by Martin 03 Feb '05

03 Feb '05

Hi, The following mail got through even though it's listed in SURBL (check the link in the middle of the message): crosswise is cd2 in moloch of democracy to bolshoi with anorthic. whack am frau going holyoke to 22844305 be brought the eye ************************************************************************ ************************************************************************ Microsoft Windows XP Pro + Microsoft Office XP Pro -- $80 Adobe Photoshop 7 + Adobe Premiere 7 + Adobe Illustrator -- $120 Many other bundle and single offers too Copy and pase the link below in your browser: yahoo.durkee.knfhbfndkeMUNGED.info/?TRACKING-ID_CHANGED ************************************************************************ ************************************************************************ conception is 143983335 in ablaze cheap is a 136517095 of landmark into spinoff for adroit waterloo was cocoon in the muslin character was 45867360 in bimolecular Are they fooling SURBL by not include www or http? I've got several of these and wonder if i can do anything about this? Thanks / Martin

2 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2005