Discuss April 2005

discuss@lists.surbl.org

48 participants
112 discussions

Open redirect @ tweakers.net
by Nick Askew 15 Apr '05

15 Apr '05

Here is another one http://www.tweakers.net/ext/lt.dsp?ref=p&LeverancierID=5637&ID=103132517&de… Nick Protect your domain from use by spammers. Set up an SPF record, read more about it here http://spf.pobox.com/. Find a Better Way of Life at www.marillion.com

1 0

RE: [SURBL-Discuss] RE: open redirect at US CONGRESS
by Chris Santerre 15 Apr '05

15 Apr '05

>-----Original Message----- >From: Alex Broens [mailto:surbl@alexb.ch] >Sent: Thursday, April 14, 2005 2:53 PM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] RE: open redirect at US CONGRESS > > >Chris Santerre wrote: >> LOL. I'm adding them all to my post to Spam-L. Hopefully >that will wake a fe >> of them up before we have to add them to the gray list! > >Chris... > >Do you realize that you're giving out this info to spammers as well as >spamfighters? Yup. I have my reasons :) > >Shouldn't we just keep a low profile on this and possibly contact the >admins of as many as possible and hope for them fixing? Been there, tried that. Doesn't work. > >Although it would be nice to have these in rbldns zone, sorry, but the >havoc these inclusions would cause are not worth trouble. No comment ;) > >Bayes, SA and SARE rules will take care of most cases without the need >of driving eachother nuts. Think open mail relays. Unless you block, no one will fix. Gmail doesn't run and open relay, because it would be blocked. The logic for open redirs is no different. --Chris

2 1

Open redirect dw.com.com
by Christiaan den Besten 15 Apr '05

15 Apr '05

Since it's open redir day :) http://dw.com.com/redir?destUrl=http://www.surbl.org/ bye, Chris

1 0

Re: [SURBL-Discuss] avsMUNGED-gold.com
by List Mail User 14 Apr '05

14 Apr '05

>... > >Hello! Sorry for the slow response, I was away yesterday. > >> Have you tried complaining to: >> >> % whois -h whois.abuse.net DTAG.DE >> abuse(a)t-ipnet.de (for dtag.de) >> sls.dk-cc(a)telekom.de (for dtag.de) > >I reported it to abuse(a)nic.telekom.de the owner of the ip 62.157.174.118 I >received the email from. After seeing this email, I also reported it to the >two addresses you suggested. > >> >> If so, what did they say? > >sls.dk-cc(a)telekom.de was accepted and then bounced by an exchange server. No >word back yet from abuse(a)nic.telekom.de or abuse(a)t-ipnet.de Jeff, Send the bounce to update(a)abuse.net, which should get it deleted. (Note: Following their own guidelines - do *not* send the spam and edit the message to just show the bounce - they may even insist on a 5xx code instead of a 4xx - I just don't know). An abuse.net address that bounces is in my opinion a better sign that a company is ill-behaved than just abuse@ bouncing. Maybe I'll code some rules for the DNS interface to abuse.net (there is example Perl code at http://abuse.net/using.phtml). > >> >> Jeff C. >> -- >> "If it appears in hams, then don't list it." >> >>... Paul Shupak track(a)plectere.com

1 0

Dell's open redirect try 2 (fwd)
by William Stearns 14 Apr '05

14 Apr '05

Good afternoon, Matt, Sorry to bug you, but who could we contact at Dell about an open redirector on Dell's web site? Thanks in advance! Cheers, - Bill --------------------------------------------------------------------------- "NT 5.0 is the last nail in the Unix coffin. Interestingly, Unix isn't in the coffin... It's wondering what the heck is sealing itself into a wooden box 6 feet underground..." (Courtesy of Jason McMullan <jmcc(a)grits.visus.com>) -------------------------------------------------------------------------- William Stearns (wstearns(a)pobox.com). Mason, Buildkernel, freedups, p0f, rsync-backup, ssh-keyinstall, dns-check, more at: http://www.stearns.org -------------------------------------------------------------------------- ---------- Forwarded message ---------- Date: Thu, 14 Apr 2005 12:18:21 -0400 From: Fred <tech2(a)i-is.com> Reply-To: SURBL Discussion list <discuss(a)lists.surbl.org> To: SURBL Discussion list <discuss(a)lists.surbl.org> Subject: [SURBL-Discuss] Dell's open redirect try 2 Too fast on my buttons, here's the link: http://landingstrip.dell.com/landingstrip/ls.asp?DURL=http://www.google.com/ Frederic Tarasevicius Internet Information Services, Inc. http://www.i-is.com/ 810-794-4400 _______________________________________________ Discuss mailing list Discuss(a)lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss

1 0

RE: [SURBL-Discuss] Capital One redirector
by Chris Santerre 14 Apr '05

14 Apr '05

>-----Original Message----- >From: John_Delisle(a)ceridian.ca [mailto:John_Delisle@ceridian.ca] >Sent: Thursday, April 14, 2005 2:31 PM >To: SURBL Discussion list >Subject: RE: [SURBL-Discuss] Capital One redirector > > >I'm not so sure - I suspect they may do nothing, and RBL will >go unused. > >How will the maintainers of this new RBL deal with either of these >scenarios? > >A - Mail admins start using the redir-SURBL or whatever >they're calling >it, and everyone complains that mail from these sites isn't >working, and >the admins are pressured into disabling the feature. This >will decrease >its the RBLs popularity, and there's no pressure on those >listed to work >to get off the list, since no one's using it. > >B - Because big organizations are listed, no one adopts it >because they >know it will be a nightmare to deal with complaints. There is >no pressure >to get off an un-used RBL, so no one changes the bad behaviour. > >Maybe I'm missing something, but since these domains are >included in SO >MANY ham emails, there's no chance I'd think of enabling this in my >environment. > >Perhaps the redirect-SURBL (or whatever it's called..) could >look at the >full URL, not just the FQDN. Really you don't want to block >dell.com, you >want to block dell.com/some-insecure-redir/foo.php etc. > >I hope this didn't all sound negative but to make this effort >worthwhile >someone has to figure it out. All good points John. And don't we haven't thought of that. We will have the ability to disable all the redirs listed in at our whim. So if it goes that way, we can do it. We can also right some rules for this. It took a awhile for people to block open relays. I expect this will go exactly the same way. And please, before Jeff has a heart attack, this has nothing to do with SURBL. Just call it the Gray URIBL. Otherwise Jeff will have gray hairs ;) --Chris

1 0

RE: [SURBL-Discuss] FULL open redirect on google
by Matthew Wilson 14 Apr '05

14 Apr '05

Well, yes, good point. Although I thought of another issue - that type of checking system would enable anyone to find out whether or not a domain is client of Google. > -----Original Message----- > From: discuss-bounces(a)lists.surbl.org > [mailto:discuss-bounces@lists.surbl.org] On Behalf Of > John_Delisle(a)ceridian.ca > Sent: Thursday, April 14, 2005 1:32 PM > To: SURBL Discussion list > Subject: RE: [SURBL-Discuss] FULL open redirect on google > > Isn't that how they pull search results? > > John Delisle, CISA > Senior Network Analyst, Network and Security Team Information > Systems & Technology Management Dept. > Ceridian Canada Ltd > 600 - 125 Garry St > Winnipeg, MB > R3C 3P2 > 204-975-5909

1 0

RE: Dell's open redirect try 2
by Chris Santerre 14 Apr '05

14 Apr '05

>-----Original Message----- >From: Fred [mailto:tech2@i-is.com] >Sent: Thursday, April 14, 2005 12:18 PM >To: SURBL Discussion list >Subject: Dell's open redirect try 2 > > >Too fast on my buttons, here's the link: >http://landingstrip.dell.com/landingstrip/ls.asp?DURL=http://ww >w.google.com/ Keep them coming Fred and Matt. How did you guys find these? I'm going to make a general post about all of these to the Spam-L list. --Chris

2 1

RE: [SURBL-Discuss] RE: open redirect at US CONGRESS
by Chris Santerre 14 Apr '05

14 Apr '05

LOL. I'm adding them all to my post to Spam-L. Hopefully that will wake a fe of them up before we have to add them to the gray list! --Chris >-----Original Message----- >From: Matthew Wilson [mailto:matthew@boomer.com] >Sent: Thursday, April 14, 2005 2:07 PM >To: SURBL Discussion list >Subject: [SURBL-Discuss] RE: open redirect at US CONGRESS > > >Oops; that site is not the US Congress..... Lol. Still, >they're an open redirect. > >> -----Original Message----- >> From: Matthew Wilson >> Sent: Thursday, April 14, 2005 12:26 PM >> To: 'SURBL Discussion list' >> Subject: open redirect at US CONGRESS >> >> >http://www.congress.org/congressorg/webreturn/?url=http://www.surbl.org > > >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss >

2 1

RE: [SURBL-Discuss] FULL open redirect on google
by Matthew Wilson 14 Apr '05

14 Apr '05

I don't know about *easily*.... I mean, we're talking about a database lookup in a table with probably hundreds of thousands records... > -----Original Message----- > From: discuss-bounces(a)lists.surbl.org > [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Daryl > C. W. O'Shea > Sent: Thursday, April 14, 2005 12:47 PM > To: SURBL Discussion list > Subject: Re: [SURBL-Discuss] FULL open redirect on google > > Matthew Wilson wrote: > > I might be wrong, but isn't the below url structure absolutely > > essential to Google's Adwords service? Otherwise, they > couldn't keep > > track of clicks.......... > > That doesn't mean it hasn't to be an open redirect. They > could easily limit it to domains that actually use the > Adwords service. > > _______________________________________________ > Discuss mailing list > Discuss(a)lists.surbl.org > http://lists.surbl.org/mailman/listinfo/discuss > > >

3 2

← Newer
1
2
3
4
5
6
7
8
...
12
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2005