Discuss

discuss@lists.surbl.org

1862 discussions

Hmmm....what if?
by Chris Santerre 03 Aug '04

03 Aug '04

What if I placed an SURBL server in the beginning of my DNS query list? Then users would actually check SURBL for a domain in a web page. If it is in SURBL they will get a 127.0.0.x and get error. Which is good! Am I missing something, or is it that easy? Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

3 2

RE: [SURBL-Discuss] Hmmm....what if?
by Chris Santerre 03 Aug '04

03 Aug '04

>-----Original Message----- >From: Karanbir Singh [mailto:mail-lists@karan.org] >Sent: Tuesday, August 03, 2004 12:48 PM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] Hmmm....what if? > > >hey, > >Chris Santerre wrote: >> What if I placed an SURBL server in the beginning of my DNS >query list? Then >> users would actually check SURBL for a domain in a web page. >If it is in >> SURBL they will get a 127.0.0.x and get error. Which is good! > >Works! All you need to do is add the multi.surbl.org ( or >whatever list >you want to use ) to the Host Search order. So that x.com is looked up >as x.org.multi.surbl.org > >Whatever DNS servers you are using at the time, should keep working + >Caching. > >I run this at a few places. Works well across a squid proxy, specially >since u can then have a real page on the 127.0.0.x interface ( = the >gateway machine's ) telling your users what happened. > >Is this what you had in mind ? > VERY COOL! Thanks! Now if only I could get Win98 to actually listen to the search order! :) --Chris

1 0

Possible FP in WS - imagestation.com
by Patrik Nilsson 03 Aug '04

03 Aug '04

imagestation.com is listed in WS. It's a Sony domain. Searching NANAS, I can't find any recent reports mentioning imagestation.com. Outgoing imagestation.com mail servers, such as zms0.imagestation.com, are listed in AUDNSBL and SORBS - as servers sending to spamtraps. But they are not listed in SBL or Spews. So... it's ambiguous. I assume that there are quite a few willing subscribers to the imagestation news letters though, so there is probably a high level of collateral damage if it's listed. Patrik

2 1

RE: [SURBL-Discuss] FP's in ws.surbl.org
by Chris Santerre 03 Aug '04

03 Aug '04

>-----Original Message----- >From: Raymond Dijkxhoorn [mailto:raymond@prolocation.net] >Sent: Monday, August 02, 2004 4:48 PM >To: Jeff Chan; SURBL Discussion list >Subject: Re: [SURBL-Discuss] FP's in ws.surbl.org > > >Hi! > >> > OUCH I'm farther behind then I thought!! I have 2 lists, >one 416 domains, >> > the other 347 domains. All to be checked. And that's not >all!!!! So if two >> > people would each take a list, I could work on the other 500+. > >> Looks like we need a clearinghouse so multiple people can help >> check these. It needn't be the fancy one Paul proposed; just >> some way to distribute them. >> >> Does anyone have a trouble ticket system already running that >> we could use and feed these into? > >We allready worked away the backlog, so pump in some new ones. >Chris is >bored :) heh. > >Ohw, btw, we just passed the 40k domains on WS. > Yeah if I get swamped again I just might send up the red flag here for some people to help like yesterday. Was a big help! I have more to add today ;) --Chris

1 0

Please whitelist ebooks.com
by Bitz 03 Aug '04

03 Aug '04

This is a legit site -- X-Spam-Status: No, hits=5.0 required=10.0 tests=WS_URI_RBL=5 http://www.ebooks.com Thanks, -B.

2 1

RE: [SURBL-Discuss] FP's in ws.surbl.org
by Chris Santerre 03 Aug '04

03 Aug '04

>-----Original Message----- >From: Joseph Burford [mailto:joseph.burford@gmail.com] >Sent: Monday, August 02, 2004 4:29 AM >To: discuss(a)lists.surbl.org >Subject: [SURBL-Discuss] FP's in ws.surbl.org > > >Hi all, > >just wondering if anyone else has reported FPs for ws.surbl.org, if so >how long did the removal take? > >While I'm here, can anyone else confirm that spam submissions to >http://www.rulesemporium.com/cgi-bin/uribl.cgi?report=1 get read. > They ABSOLUTELY get read. Usually quite quickly. However they all need to be hand checked. Currently I'm 236 submissions behind for just that. About 400 submissions behind on another. Soooo much to do! --Chris

5 8

FP's in ws.surbl.org
by Joseph Burford 03 Aug '04

03 Aug '04

Hi all, just wondering if anyone else has reported FPs for ws.surbl.org, if so how long did the removal take? While I'm here, can anyone else confirm that spam submissions to http://www.rulesemporium.com/cgi-bin/uribl.cgi?report=1 get read. Regards, Joseph

3 5

RE: [SURBL-Discuss] FP's in ws.surbl.org
by Chris Santerre 03 Aug '04

03 Aug '04

OUCH I'm farther behind then I thought!! I have 2 lists, one 416 domains, the other 347 domains. All to be checked. And that's not all!!!! So if two people would each take a list, I could work on the other 500+. HELP!!!! :) --Chris >-----Original Message----- >From: Raymond Dijkxhoorn [mailto:raymond@prolocation.net] >Sent: Monday, August 02, 2004 2:23 PM >To: SURBL Discussion list >Subject: RE: [SURBL-Discuss] FP's in ws.surbl.org > > >Hi Chris, > >> >just wondering if anyone else has reported FPs for >ws.surbl.org, if so >> >how long did the removal take? >> > >> >While I'm here, can anyone else confirm that spam submissions to >> >http://www.rulesemporium.com/cgi-bin/uribl.cgi?report=1 get read. > >> They ABSOLUTELY get read. Usually quite quickly. However >they all need to >> be hand checked. Currently I'm 236 submissions behind for >just that. About >> 400 submissions behind on another. Soooo much to do! > >If there is a way to help you on this, let us know. > >Bye, >Raymond. >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss >

4 8

RE: [SURBL-Discuss] Please beta test ms.surbl.org - data from Mai lSecurity
by Chris Santerre 02 Aug '04

02 Aug '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Friday, July 30, 2004 3:32 AM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] Please beta test ms.surbl.org - data from >MailSecurity > > >On Friday, July 30, 2004, 12:05:52 AM, Raymond Dijkxhoorn wrote: >>> This released list has been developed from actual spam >recieved since >>> the SURBL effort started. I don't doubt there are a lot of >double ups >>> with ws.surbl.org however. >>> >>> > As a seperate list i would so far say, uhm, not really >worth the efford, >>> > as a extra list of domains for WS, i think its worth it. >>> >>> Sure - kinda what I was originally intending anyway :) > >> Sounds like a plan! :) > >>> The list is developed from messages which slip through existing >>> SURBL's and other custom SA rulesets - addmittedly less and less are >>> getting through, but we do keep on top of it. It is >current, but may >>> also be a different sampling of messages to those you see. >>> >>> Expiry of listings is something we're still working on, but are a >>> little loathe to do because we've recently noticed a spate of >>> "recycled" domain names. > >> Ok, great. It would be a nice addition to WS i think... Anyone ? > >Sounds good to me. Anyone else? > >If so, Chris please consider pulling these into WS. > >Jeff C. 1) Send me the -different- domains that aren't already listed and I will blast them right into WS. I'll do it in such a way I can track FPs back to them. 2) How will we handle new additions? Submit them to who? 3) When will we have an SURBL contributors BBQ? Soon I hope, I'm hungry! --Chris

6 7

What data sources are in ws now? :-)
by Jeff Chan 02 Aug '04

02 Aug '04

I'm updating the SRUBL Lists about about ws, and may have lost track of all the data sources now going into it: http://www.surbl.org/lists.html#ws > ws.surbl.org - sa-blacklist and other domains > ws.surbl.org has entries from three SpamAssassin rulesets: Bill > Stearns' sa-blacklist, BigEvil.cf from Chris Santerre and his > SARE cohorts, and Paul Barbeau's MidEvil.cf. ws.surbl.org also > has entries from additional spam URI domain lists such as > MailSecurity's formely proprietary SURBL lists, data from Joe > Wein's jwSpamSpy Windows POP mail spam-filtering agent, plus > some other manual lists, mostly maintained by Chris. Chris, Bill and Raymond, am I forgetting any that we should be crediting publically? Jeff C.

3 7

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss