From schampeo@hesketh.com Thu Jul  8 21:27:15 2004
From: Steven Champeon <schampeo@hesketh.com>
To: discuss@lists.surbl.org
Subject: Re: [SURBL-Discuss] Submissions to SURBL list thru SARE website.
Date: Thu, 08 Jul 2004 15:26:34 -0400
Message-ID: <20040708192634.GE27275@hesketh.com>
In-Reply-To:
 <620A4FF9B83DD511B69900062939D037ABFD0B@internal.merchantsoverseas.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============6661282759895844043=="

--===============6661282759895844043==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

on Thu, Jul 08, 2004 at 03:17:52PM -0400, Chris Santerre wrote:
> Good grief. Let me say this slowly....
>=20
> SURBL is for domains in LINKS, URLS, websites, images, things you click on,
> images hosted in the email.
>=20
> SURBL is NOT, will never be used, doesn't care, /dev/null's, any domain or
> IP the email came from.=20

Well, I for one won't be sending any more domains along if I have to also
distinguish between the domains I happened to find in email bodies from
those I happened to find in message headers. Sorry. The overlap is far too
great, as for example in a recent message I got (summarized):

Received: from mx51.AfClawFrog1.us (mx51.afclawfrog1.us [216.162.182.51])
Subject: [Target-removed] Free Break-In & Fire Protection System
Message-ID: <wfbzwsbunaxhmuetqnef(a)mx51.AfClawFrog1.us>

[text part with a snippet of fictional text]

[html part containing several links to=20

<a href=3D"http://medium.AfClawFrog1.us?id=3D[snipped long hash id]

<img src=3D"http://images.AfClawFrog1.us/images/HomeSecurityProfessionals2_r1=
_c1.gif
]

I ran a rDNS scan on the netblock and found another 40+ domains all of
the same type. As they are found in both the body and the message headers,
I want to be able to block all future mail rather than archiving it; which
I can do from sendmail. SURBL just lets me filter after acceptance.

Sorry, I don't have time to deal with the distinction. Because for me, for
the most part, there quite simply is no distinction.

--=20
hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2554 w: http://hesketh.com
Buy "Cascading Style Sheets: Separating Content from Presentation, 2/e" today!
http://www.amazon.com/exec/obidos/ASIN/159059231X/heskecominc-20/ref=3Dnosim/

--===============6661282759895844043==--