Discuss September 2006

discuss@lists.surbl.org

20 participants
23 discussions

Re: [SURBL-Discuss] What to tell senders
by Rob McEwen (PowerView Systems) 11 Sep '06

11 Sep '06

Joseph Brennan asked: > When we reject a message because it contains a URI that is in SURBL, > should our 550 message refer the sender to www.surbl.org? The surbl Joseph: I can't speak officially for SURBL, but I'd suggest stating something like the following in the SMTP return text: "blocked by XXX due to containing a URI listed at www.surbl.org" where "XXX" = your organization or your spam filter. The idea is that we WANT legit senders to give SURBL immediate feedback if/when SURBL makes a mistake (which is very rare). However, SURBL never blocks any mail and we don't want to give users the mistaken impression that SURBL blocked their message. Instead, it is the spam filter provider or mail hosting provider's decision to use SURBL and SURBL's lists comes without warranty or any type of guarantees (even those most deem SURBL to be very accurate and to have extremely few FPs). BTW - just a side suggestion... I find that the best spam filters employ a variety of spam-catching techniques and strive to NOT score any one particular tactic high enough to single-handedly block a message. Of course, we strive to make SURBL so reliable that most would consider it safe to block a message soley based on SURBL "hit"... but, if applied correctly, following this suggestion will provide the best case scenario in BOTH reducing FPs and boosting spam filtering percentages. Rob McEwen PowerView Systems rob(a)PowerViewSystems.com

1 0

RE: Inetesting new URI ploy
by Chris Santerre 11 Sep '06

11 Sep '06

> -----Original Message----- > From: Bill Landry [mailto:billl@pointshare.com] > Sent: Monday, September 11, 2006 2:55 PM > To: users(a)spamassassin.apache.org; discuss(a)lists.surbl.org > Subject: Inetesting new URI ploy > > > Just came across one of these in a spam message: > > bang Locals @ www.nowdatenow. com oopsy no space before com > > Oh what will they try next...? They will take a page from google... Please figure this out and type in your browser for sup3r l33t drgzzzz! http://haacked.com/images/googlebillboard.jpg --Chris

1 0

Inetesting new URI ploy
by Bill Landry 11 Sep '06

11 Sep '06

Just came across one of these in a spam message: bang Locals @ www.nowdatenow. com oopsy no space before com Oh what will they try next...? Bill

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2006