On Tuesday, October 3, 2006, 9:26:43 PM, Steve Sobol wrote:
> Are you guys still looking for a logo? I've been pretty busy :(
Yep. Can you make your logo with thicker lines and text?
Jeff C.
--
Don't harm innocent bystanders.
www.4emi.com is coming up as listed in PH and AB SURBL.
EMI Solutions is a legitimate supplier we use in manufacturing
aircraft electronics and should not be listed in either PH or AB.
Funny thing is I can't find the listing on abusebutler or castlecops.
This server is running SpamAssassin version 3.0.3
On Thursday, August 17, 2006, 9:12:51 PM, Steve Sobol wrote:
> Jeff Chan wrote:
>>> http://stevesobol.com/content/surbllogo.jpg
>>
>>> This is just a preliminary, I-did-this-in-five-minutes concept.
>>
>> It's good. (Red circle and slash = "no" and url://)
>>
>> Can you make one with spam:// ?
> Absolutely not, but see
> http://stevesobol.com/content/surbllogo2.jpg
> (Ok, I was just kidding, of course I can do it!)
> If that looks OK to you, I'll take that concept and come up
> with a final product.
Hi Steve,
Looks great; thanks much! If I could request a modification, it
would be for bolder type and thicker lines if possible. Also I'd
probably make the text black, as in blackhat.
Cheers,
Jeff C.
--
Don't harm innocent bystanders.
What's going on here?
Numerous examples of porn spam sent Sunday have all different hostnames
that resolve to the same few IP addresses, apparently by round robin:
$ host takinoivanober.comtakinoivanober.com has address 68.142.212.127
takinoivanober.com has address 68.142.212.128
takinoivanober.com has address 68.142.212.129
takinoivanober.com has address 68.142.212.130
takinoivanober.com has address 68.142.212.135
takinoivanober.com has address 68.142.212.126
$ host zascehjukalsderr.comzascehjukalsderr.com has address 68.142.212.130
zascehjukalsderr.com has address 68.142.212.135
zascehjukalsderr.com has address 68.142.212.126
zascehjukalsderr.com has address 68.142.212.127
zascehjukalsderr.com has address 68.142.212.128
zascehjukalsderr.com has address 68.142.212.129
$ host sex368yzx.comsex368yzx.com has address 68.142.212.129
sex368yzx.com has address 68.142.212.130
sex368yzx.com has address 68.142.212.135
sex368yzx.com has address 68.142.212.136
sex368yzx.com has address 68.142.212.137
sex368yzx.com has address 68.142.212.128
Reverse DNS resolves to Yahoo, only:
$ host 68.142.212.130
130.212.142.68.in-addr.arpa domain name pointer p10w14.geo.mud.yahoo.com.
$ host 68.142.212.127
127.212.142.68.in-addr.arpa domain name pointer p10w11.geo.mud.yahoo.com.
$ host 68.142.212.128
128.212.142.68.in-addr.arpa domain name pointer p10w12.geo.mud.yahoo.com.
The range 68.142.192 through 68.142.255 is all Inktomi, contact address
network-abuse(a)cc.yahoo-inc.com, so it really is Yahoo.
The interesting bit is that connecting by IP address or yahoo hostname
gets a "Error 400 - Bad Request", but connecting by the spammer hostname
gets a web page.
I'd be especially interested in a generalized way of catching this.
Joseph Brennan
Columbia University Information Technology
>
> On 29/09/06, Jeff Chan <jeffc(a)surbl.org> wrote:
> > On Friday, September 29, 2006, 8:18:33 AM, Peter Bowyer wrote:
> > > On 29/09/06, Robert Temple <rtscruiser(a)gmail.com> wrote:
> > >> Sorry for the newbie quesiton. I did more research on the SURBL site
> and
> > >> found out you can't use it as a stand alone app. Re-enabled
> Spamassassin :(
> > >> and now it is working perfectly.
> >
> > > Robert
> >
> > > I believe you mentioned you were using Exim - there is a method of
> > > directly integrating URIBL/SURBL - which is (actively) maintained by
> > > Erik Mugele.
> >
> > > http://www.teuton.org/~ejm/exim_surbl/
> >
> > > Peter
> >
> > Hi Peter,
> > The site Robert mentioned:
> >
> > http://forums.ev1servers.net/showthread.php?t=57896
> >
> > is about using Erik Mugele's perl program (with Exim?) in the ev1
>
> Ah, sorry - came in part-way through. Erik's method is a very
> effective way of integration with Exim, I hope Robert might give it
> another try. The exim-users list will support him if he needs it.
>
> Peter
>
> --
> Peter Bowyer
> Email: peter(a)bowyer.org
So it IS possible to use SURBL without Spamassassin? That would be awesome.
I'll check out the exim site for their users discussion list.
Thanks!
On 29/09/06, Robert Temple <rtscruiser(a)gmail.com> wrote:
> Sorry for the newbie quesiton. I did more research on the SURBL site and
> found out you can't use it as a stand alone app. Re-enabled Spamassassin :(
> and now it is working perfectly.
Robert
I believe you mentioned you were using Exim - there is a method of
directly integrating URIBL/SURBL - which is (actively) maintained by
Erik Mugele.
http://www.teuton.org/~ejm/exim_surbl/
Peter
--
Peter Bowyer
Email: peter(a)bowyer.org
Sorry for the newbie quesiton. I did more research on the SURBL site and
found out you can't use it as a stand alone app. Re-enabled Spamassassin :(
and now it is working perfectly.
>
> > Hello;
> >
> > I wanted to replace Spamassassin on my server, so I've set up SURBL
> using
> > instructions from a forum on my server companies site (here: http:/
> > /forums.ev1servers.net/showthread.php?t=57896)
> >
> > The installation seemed to go well, but I haven't noticed any reduction
> in
> > spam, and when I SSL into the server and
> >
> > grep "Message contains blacklisted domain" /var/log/exim_mainlog
> >
> > I don't see any entries.
> >
> > Is there a way to check to see if SURBL is working?
> >
>
> What's in your exim config?
>
>
>
I haven't put this through its paces yet. The recursor can forward zones
to a nameserver (I still prefer dnscache's syntax) so this can be used
as a caching nameserver in front of rbldnsd
http://doc.powerdns.com/built-in-recursor.htmlhttp://wiki.powerdns.com/projects/trac/
The author of PowerDNS Bert Hubert is well-known in Linux circles for
his work in explaining the esoteric commands of iproute via LARTC (Linux
Advanced Routing and Traffic Control)
http://lartc.org/
Hope this helps, Regards, Yusuf
--
Yusuf Goolamabbas
yusufg(a)outblaze.com
Hello;
I wanted to replace Spamassassin on my server, so I've set up SURBL using
instructions from a forum on my server companies site (here: http:/
/forums.ev1servers.net/showthread.php?t=57896)
The installation seemed to go well, but I haven't noticed any reduction in
spam, and when I SSL into the server and
grep "Message contains blacklisted domain" /var/log/exim_mainlog
I don't see any entries.
Is there a way to check to see if SURBL is working?
Thanks for any suggestions.
- Robert