Discuss

discuss@lists.surbl.org

1 participants
1864 discussions

Got these errors
by Doc Schneider 06 May '04

06 May '04

I get usual log events sent to me and notice this one. There was just this one that I saw. May 6 01:33:21 newmail spamd[25105]: Failed to run WS_URI_RBL SpamAssassin test, skipping: ^I(Modification of non-creatable array value attempted, subscript -1 at /usr/local/lib/perl5/site_perl/5.8.2/Mail/SpamAssassin/SpamCopURI.pm line 179, <GEN15147> line 175. ) May 6 01:33:21 newmail spamd[25105]: Failed to run SPAMCOP_URI_RBL SpamAssassin test, skipping: ^I(Modification of non-creatable array value attempted, subscript -1 at /usr/local/lib/perl5/site_perl/5.8.2/Mail/SpamAssassin/SpamCopURI.pm line 179, <GEN15147> line 175. ) May 6 01:33:21 newmail spamd[25105]: Failed to run BE_URI_RBL SpamAssassin test, skipping: ^I(Modification of non-creatable array value attempted, subscript -1 at /usr/local/lib/perl5/site_perl/5.8.2/Mail/SpamAssassin/SpamCopURI.pm line 179, <GEN15147> line 175. ) -- -Doc --- MomNDoc Online Consultants http://www.maddoc.net/ momndoc(a)maddoc.net

2 2

form-type URIs correctly extracted?
by Jeff Chan 06 May '04

06 May '04

I've spotted a couple form-enclosed URIs lately, such as: <FORM action=3dhttp:// www =2e seo500 =2e com/submit2=2ephp=20 method=3dpost> (without the spaces in the URI) Wanted to sanity check that urirhsbl and SpamCopURI are both finding these correctly. Can anyone confirm? (Yeah I know I should just read the sources.... ;-) TIA, Jeff C.

1 0

List of yahoo domains?
by Jeff Chan 06 May '04

06 May '04

Does anyone have a list of all the world Yahoo domains? If so would you please forward them to me? Same for any other large, legitimate operations with different names like these. TIA, Jeff C.

1 0

ct.mailresponses.com
by Chris Santerre 05 May '04

05 May '04

I found this link in a bunch of spam. However it may be a shammer. ct.mailresponses.com Thoughts? Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

1 0

RE: Bug in Spamcop's surbl add-on module
by Chris Santerre 05 May '04

05 May '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Wednesday, May 05, 2004 8:26 AM >To: spamassassin-users(a)incubator.apache.org >Cc: SURBL Discuss >Subject: Re: Bug in Spamcop's surbl add-on module > > >On Wednesday, May 5, 2004, 5:18:04 AM, Keith Hackworth wrote: >> I was installing >> a new mail server and testing the surbl lookups, but my test kept >> getting through not being marked as spam. The test I was using was >> http://e.1asphost.com - this is on the be.surbl.org list. ... >> My logs show that the >> system is looking up 1asphost.com, which is NOT on the list. > For some >> reason, it stripped off the "e." > >> It seems that spamcop's surbl doesn't handle subdomains at >all. Anyone >> else seeing this? > >Hmm, it is indeed in BigEvil with the e. : > >bigevil.cf:uri BigEvilList_181 >/\b(?:extreme-rapes\.com|excaliburproducts\.c >om|evansezmoney\.estarnetwork\.com|enjoyadvanced097\.org|emedor >ders\.com|email\. >homemadesimple\.com|ehostzzz\.net|e-g\.com|efreedomweb\.net|ecr >edibledeals\.com| >echofrompeople\.com|e\.1asphost\.com)\b/i > >and it's therefore making it into be.surbl.org with the e. : > >bigevil.domains:e.1asphost.com > >However we should be taking off the subdomain before it goes into >the SURBL form. I'll need to check with Chris on how we can >handle that. > >BTW, SURBL is not a SpamCop project, although we are using >SpamCop URI domains as a data source in the sc.surbl.org list. > >Jeff C. It's not a bug, its a feature! Actually, no its a bug :) I have been going thru cleaning these sort of things up. However I started at the begining of the B.E. list. This is at rule 181, I haven't even got to 100 yet! This is left over from my alpha phase of B.E. I've had a lot more coffee since then. So I will fix that one, But I'm sure there are others ;) --Chris

2 1

[SURBL-Discuss] Re: Proposal to add some anti-phishing data to SURBL
by Jeff Chan 05 May '04

05 May '04

On Wednesday, May 5, 2004, 7:02:45 AM, Smart,Dan Smart,Dan wrote: > Would love to have this made available. I'm surprised this list isn't more > focused on the Phishing issues. Spam is a nuisance, while Phishing can > bring *REAL* damage and loss of privacy. > I, for one, would love such an anti-phishing SURBL. Thanks for the feedback Dan. I agree phishing is probably more potentially damaging that other spams. We should be getting the data into a SURBL, either as part of ws.surbl.org and/or perhaps a future combined list. Jeff C. __ > <<Dan>> > | How do people feel about adding this data to a public SURBL? > | Does this kind of division of free and commercial uses seem > | ok? Would any of the SURBL public name servers have any > | issues with an arrangement like this?

1 0

RE: [SURBL-Discuss] Stupid SPAM
by Chris Santerre 05 May '04

05 May '04

>-----Original Message----- >From: Jose-Marcio.Martins(a)ensmp.fr >[mailto:jose-marcio.martins@ensmp.fr] >Sent: Wednesday, May 05, 2004 3:47 PM >To: SURBL Discussion list >Subject: [SURBL-Discuss] Stupid SPAM > > > > >Hello, > >Take a look at this SPAM : > > http://www.ensmp.fr/~martins/Prozac > >Mainly, check the source. > >The problem is that it comes with many, many URLs. At the beginning, >there are URLs needed by the SPAM itself. After, it puts many >URLs with >font size equals to 1. Most of these last domains aren't spam... 8-) > >Jose-Marcio > Ah it feels like I'm wraped in a warm URL blanket :) Yeah I've been seeing these for a long time when they tried to get around bigevil. This is one of the reasons I got rid of using scripts to pull out URLs. I believe SA 3.0 will handle these correctly. SURBL is touched by a human. So these things get picked up quick. But common users trying to submit these other URLs is where the time consumption will be. :( Show that we kind of have the spammers by the booboo now :P --Chris

1 0

Re: Bug in Spamcop's surbl add-on module
by Jeff Chan 05 May '04

05 May '04

On Wednesday, May 5, 2004, 5:18:04 AM, Keith Hackworth wrote: > I was installing > a new mail server and testing the surbl lookups, but my test kept > getting through not being marked as spam. The test I was using was > http://e.1asphost.com - this is on the be.surbl.org list. ... > My logs show that the > system is looking up 1asphost.com, which is NOT on the list. For some > reason, it stripped off the "e." > It seems that spamcop's surbl doesn't handle subdomains at all. Anyone > else seeing this? Hmm, it is indeed in BigEvil with the e. : bigevil.cf:uri BigEvilList_181 /\b(?:extreme-rapes\.com|excaliburproducts\.c om|evansezmoney\.estarnetwork\.com|enjoyadvanced097\.org|emedorders\.com|email\. homemadesimple\.com|ehostzzz\.net|e-g\.com|efreedomweb\.net|ecredibledeals\.com| echofrompeople\.com|e\.1asphost\.com)\b/i and it's therefore making it into be.surbl.org with the e. : bigevil.domains:e.1asphost.com However we should be taking off the subdomain before it goes into the SURBL form. I'll need to check with Chris on how we can handle that. BTW, SURBL is not a SpamCop project, although we are using SpamCop URI domains as a data source in the sc.surbl.org list. Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

[SURBL-Discuss] Fwd: Re[2]: Proposal to add some anti-phishing data to SURBL
by Jeff Chan 05 May '04

05 May '04

This is a forwarded message From: Robert Menschel To: SpamAssassin Developers <spamassassin-dev(a)incubator.apache.org> Date: Tuesday, May 4, 2004, 7:06:25 PM Subject: Proposal to add some anti-phishing data to SURBL Tuesday, May 4, 2004, 9:42:14 AM, Marc wrote: MP> For what it is worth - I support it. I definitely want to block MP> exposure to fraud of my users. Agreed. The Phishing SURBL sounds like a good idea to me. I see no conflict with a company doing commercial work also offering a public service. Bob Menschel MP> Jeff Chan wrote: >>David Hooton of Platform Networks has been converting the >>proprietary SpamAssassin message content filtering rules of >>MailSecurity.net.au into SURBLs. The data's being organized into >>separate SURBLs, for example pharma, phishing, and other spams. >>In order to give something back to the SURBL/SA community and the >>Internet in general, he is proposing to make the phishing data >>freely available for potential inclusion by Bill Stearns in >>ws.surbl.org. ...

1 0

[SURBL-Discuss] Fwd: Re: Proposal to add some anti-phishing data to SURBL
by Jeff Chan 04 May '04

04 May '04

This is a forwarded message From: Marc Perkel Date: Tuesday, May 4, 2004, 9:42:14 AM Subject: Proposal to add some anti-phishing data to SURBL For what it is worth - I support it. I definitely want to block exposure to fraud of my users. Jeff Chan wrote: >David Hooton of Platform Networks has been converting the >proprietary SpamAssassin message content filtering rules of >MailSecurity.net.au into SURBLs. The data's being organized into >separate SURBLs, for example pharma, phishing, and other spams. >In order to give something back to the SURBL/SA community and the >Internet in general, he is proposing to make the phishing data >freely available

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss