Discuss

discuss@lists.surbl.org

1862 discussions

linkshield - Premium affiliate link protection
by Alex Broens 15 Jan '05

15 Jan '05

Guys, Getting spams with links to: http://secure. linkshield. com/?c=401&l=12 Seems this so called "Premium affiliate link protection" is being "abused". quite a few dicey nanas and "biz" & "mlm" newsgroup entries. They've been around for a while, but I really doubt if, in this case, that should be take in account. Comments? votes to SURBLize? Alex

2 1

Re: quick poll on SURBL hit %
by Terry Sullivan 10 Jan '05

10 Jan '05

Chris Santerre wrote: >Just curious as to what average percent of spam people see SURBL >hitting. In a non scientific manor, I average about 85% ... I've run multiple analyses on historical datasets, and get a consistent *average* of 82%-86%, so 84% is a decent estimate. The most noteworthy statistical characteristic of the SURBL hit rate over time is the large *variance* in hit rate. Some days, the SURBL hit rate I observe in my data is in the 60%'s, while other days its in the 90%'s. The fluctuation appears to be at least somewhat periodic in nature (several "low" days in a row, followed by several "high" days). I've not actually run the numbers, but my totally informal, *purely gut* sense is that the magnitude of that variance may have diminished lately, but the periodic pattern persists. These periodic fluctuations imply that there is probably some systematic cause underlying this variance, and that cause is itself almost certainly periodic in nature. >I have a feeling if I clean up my >results a bit, that number would be even higher. I've talked about this with Jeff several times, and he's even shared some of my comments with this list. No one in the anti-spam world likes hearing this, but there is very strong evidence of a "hard" statistical detection limit right around ~85%. This limit appears to be more or less independent of data set or detection method. This is not to say that only 85% of spam can be stopped; rather, it implies that no one *single* detection method broadly applicable to spam-as-a-whole can reliably (repeatably, predictably, consistently) snag more than ~85%. (At the risk of sounding testy, I am *not* looking to debate this point. Under the heading of "you can lead a horse to water," I'm content to have anyone to believe anything they like, even if it's demonstrably wrong. All I can do is report empirical results based on multiple analyses, multiple detection methods, multiple datasets, and multiple time periods. The observed ~85% detection limit is remarkably consistent across all these conditions.) One of the vaguely interesting research questions implicit in this result is the determination of the *unique* contribution of any given approach. That is, what %-age of spam *missed by all other approaches* does a particular detection method snag? On my *personal* spam corpus, SURBL's *unique* contribution is in the 18%-20% range.

1 0

using multi list as rhsbl
by Matt Egan (hotmail) 09 Jan '05

09 Jan '05

I was just curious if anyone had tried to use any of the surbl.org zones as an rhsbl at the mta level. I just turned it on in "warn only" mode on my postfix box. I did it on both the sender (mail from) and the client (ptr if available). just curious if anyone else had tried or does this. -Matt

2 1

securedata.net FP report
by Vincent Schonau 07 Jan '05

07 Jan '05

One of our users has reported a false positive on id294.securedata.net; securedata.net is listed in ws. I see no sightings more recent than june 2004; and none for this specific subdomain. The domain appears to belong to some sort of shopping-cart service-provider, but I'm unsure who (hostway?). They appear to assign distinct subdomains to distinct customers. What's the policy on this type of thing? To supply a full message I'll have to ask the customer for permission. I'd rather not send it to a publicly archived mailing list, however (customer data 'n all). Regards, -- Vincent Schonau XS4ALL Internet BV http://www.xs4all.nl/veiligheid/ Nieuwe spamfilters! http://www.xs4all.nl/nieuws/bericht.php?id=593

3 3

Re: [SURBL-Discuss] securedata.net FP report
by Jeff Chan 06 Jan '05

06 Jan '05

On Thursday, January 6, 2005, 5:28:18 AM, Alex Broens wrote: > Jeff, > It would be very appreciated if you would make new whitelisted URIs > public so those who run local zones can decide if the want to move a URL > to their private zone Hi Alex, The SURBL whitelist is available at: http://spamcheck.freeapp.net/whitelist-domains.sort Jeff C. -- "If it appears in hams, then don't list it."

2 2

quick poll on SURBL hit %
by Chris Santerre 06 Jan '05

06 Jan '05

Just curious as to what average percent of spam people see SURBL hitting. In a non scientific manor, I average about 85% or greater hitting SURBL for all spam that doesn't get rejected by my MTA. I have a feeling if I clean up my results a bit, that number would be even higher. Chris Santerre System Admin and SARE/SURBL Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

9 13

quick FP report (fwd)
by Justin Mason 06 Jan '05

06 Jan '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 esmokes.com -- not a spammy domain, I've been buying my cigarettes from them for aaaaages ;) Listed in JP and WS. - --j. - ------- Forwarded Message > Date: 06 Jan 2005 02:05:02 -0500 > From: "Esmokes Weekly Promotions" <sales(a)esmokes.com> > To: jm-esmokes(a)jmason.org > Subject: New Year Specials at eSmokes.com > > ------=_NextPart_000_0012_C0C2A8B8.59685100 > Content-Type: text/plain > Content-Transfer-Encoding: 8bit > > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" > "http://www.w3.org/TR/html4/loose.dtd"> > <html> > <head> > <title>Last Chance For Standard Delivery By Christmas!</title> > <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> > <style type="text/css"> >  > </style> > </head> > > <body> > <table width="582" border="1" align="center" cellpadding="0" > cellspacing="0" bordercolor="#660000"> > <tr> > <td width="582"> <table width="582" border="0" align="center" > cellpadding="0" cellspacing="0"> > <tr> > <td align="center" valign="top"><img > src="http://www.esmokes.com/email/images/esmk_email_header_050105.gif" > alt="eSmokes.com" width="582" height="104" border="0" align="left" > usemap="#Map2"></td> > </tr> > <tr> > <td height="1" bgcolor="#999999"></td> > </tr> > <tr> > <td height="1" bgcolor="#999999"></td> > </tr> > <tr> > <td width="582" align="center" valign="top"> >  > <table width="582" border="0" cellspacing="2" cellpadding="2 > "> > <tr> > <td width="300" align="right" valign="top"><img > src="http://www.esmokes.com/email/images/esmk_email_promo_050105.gif" > alt="A New Year of Savings"></td> > <td width="282" align="left" valign="top"> > > <table width="282" border="0" align="center" cellpaddin > g="0" > cellspacing="0" id="coupon"> > <tr> > <td rowspan="3"><img > src="http://www.esmokes.com/email/images/linevert.gif" height="150" > width="1"></td> > <td height="1" width="300" valign="top"><img > src="http://www.esmokes.com/email/images/linehorz.gif" width="282" > height="1"></td> > <td rowspan="3"><img > src="http://www.esmokes.com/email/images/linevert.gif" height="150" > width="1"></td> > </tr> > <tr> > <td valign="top" align="center"><table width="282" > border="0" cellspacing="2" cellpadding="2"> > <tr> > <td width="1"> </td> > <td colspan="2" align="right"><table width="280" > cellspacing="0" cellpadding="1" class="small" border="1" > bordercolor="#000000"> > <tr> > <td bgcolor="#FFFFFF" width="120" > align="center">eSmokes.com eCoupon</td> > <td bgcolor="#FFFF00" width="160" > align="center">EXPIRES: 1/12/05 5pm EST</td> > </tr> > </table></td> > </tr> > <tr> > <td width="1"> </td> > <td class="text" valign="middle" width="192" > align="left"><p><font size="5" color="#CC0000">Only $9.99 for Unify with > this eCoupon<br></font></p></td> > <td class="text" valign="top" width="90"><a > href="http://www.esmokes.com/specials.asp?vAdCamp=email01052005" > target="_blank"><img > src="http://www.esmokes.com/email/images/collage_unify.gif" alt="Unify > Coupon" width="77" height="80" border="0"></a></td> > </tr> > <tr> > <td colspan="3" width="282" align="left" > class="text">Online purchases through <b>January 12th</b><br> > Enter eCoupon code <b>123UNIFY</b> at checkout</td> > </tr> > </table></td> > </tr> > <tr> > <td valign="bottom" align="center"><img > src="http://www.esmokes.com/email/images/linehorz.gif" width="290" > height="1"></td> > </tr> > </table></td> > </tr> > </table> >  > </td> > </tr> > <tr> > <td colspan="2" align="left" valign="middle" class="small"><b>TERMS O > F > eCOUPON OFFER:</b> This coupon is good on Unify online orders with valid > eSmokes coupon code. Discount is only valid until 1/12/05 5pm EST. Limited > to smokers 21 years of age or older. Offer good only for eSmokes.com.</td> > </tr> > <tr> > <td align="center"> >  > <br> > <table width="562" border="0" cellspacing="0" c > ellpadding="0" > align="center" id="products"> > <tr class="header"> > <td width="186" align="center" class="r > ed">Bronco on Sale</td> > <td align="center" width="186" class="r > ed">New Products at > eSmokes!</td> > <td align="center" width="186" class="r > ed">Generic Brands</td> > </tr> > <tr> > <td width="186" align="center"><a > href="http://www.esmokes.com/specials.asp?vAdCamp=email01052005" > target="_blank"><img > src="http://www.esmokes.com/images/styles/broncoFulFla.jpg" alt="Bronco On > Sale!" border="0"></a></td> > <td width="186" align="center"><a > href="http://www.esmokes.com/candybrands_default_new.asp?vAdCamp=email01052 > 005" target="_blank"><img > src="http://www.esmokes.com/email/images/esmk_candy_promo_050105.jpg" > alt="New Products at eSmokes!" border="0"></a></td> > <td width="186" align="center"><a > href="http://www.esmokes.com/otherbrands_default_new.asp?vAdCamp=email01052 > 005" target="_blank"><img > src="http://www.esmokes.com/images/gencollagesm.jpg" alt="Generic Brands" > border="0"></a></td> > </tr> > <tr> > <td width="186" align="center" class="grey" > valign="top">Save 50¢ on all styles<br><br> > <span class="red"><a > href="http://www.esmokes.com/specials.asp?vAdCamp=email01052005" > target="_blank" class="text">Limited Time Offer!<br>All Bronco styles on > Sale!</a></span></td> > <td width="186" align="center" class="g > rey" valign="top">Save on > popular breath-<br>freshening gum and mints!<br> > <span class="red"><a > href="http://www.esmokes.com/specials.asp?vAdCamp=email01052005" > target="_blank" class="text"><br>View our Newest Products!</a></span></td> > <td width="186" align="center" class="g > rey" valign="top">Great deals > on your<br> > favorite generics!<br> > <br> > <span class="red"><a > href="http://www.esmokes.com/otherbrands_default_new.asp?vAdCamp=email01052 > 005" target="_blank" class="text">Save on popular<br>generic brands!</a> > </span></td> > </tr> > <tr> > <td> </td> > <td> </td> > <td> </td> > </tr> > <tr> > <td width="186" align="center" class="red"> > Premium Cigarettes</td> > <td width="186" align="center" class="red"> > Specialty Brands</td> > <td width="186" align="center" class="red"> > Premium Cigars</td> > </tr> > <tr> > <td width="186" align="center"><a > href="http://www.esmokes.com/domestic_default_new.asp?vAdCamp=email01052005 > " target="_blank"><img src="http://www.esmokes.com/images/precollagesm.jpg" > alt="Premium Brands" border="0"></a></td> > <td width="186" align="center"><a > href="http://www.esmokes.com/foreign_otherbrands_default_new.asp?vAdCamp=em > ail01052005" target="_blank"><img > src="http://www.esmokes.com/images/forcollagesm.jpg" alt="Specialty Brands" > border="0"></a></td> > <td width="186" align="center"><a > href="http://www.esmokes.com/premium_cigar_default.asp?vAdCamp=email0105200 > 5" target="_blank"><img src="http://www.esmokes.com/images/cigar_front.gif" > alt="Premium Cigars" border="0"></a></td> > </tr> > <tr> > <td width="186" align="center" class="grey" > valign="top">Ultra low > prices<br> > on all the best!<br> > <br> > <span class="red"><a > href="http://www.esmokes.com/domestic_default_new.asp?vAdCamp=email01052005 > " target="_blank" class="text">Ultra low prices on all<br>top premium > brands</a></span></td> > <td width="186" align="center" class="grey" > valign="top">Great > smokes from<br>around the World!<br> > <span class="red"><a > href="http://www.esmokes.com/foreign_otherbrands_default_new.asp?vAdCamp=em > ail01052005" target="_blank" class="text"><br>Save on Foreign &<br> > Specialty smokes</a></span></td> > <td width="186" align="center" class="grey" > valign="top">A > selection of the<br>world's finest cigars.<br><br> > <span class="red"><a > href="http://www.esmokes.com/premium_cigar_default.asp?vAdCamp=email0105200 > 5" target="_blank" class="text">Come look inside<br>our humidor!!</a> > </span></td> > </tr> > </table><br> > >  > > </td> > </tr> > <tr> > <td class="text"> > <table width="570" border="0" cellspacing="2" cellpadding="2"> > <tr> > <td> > <p>From your friends at<br> > <b><a > href="http://www.esmokes.com/default_new.asp?vAdCamp=email01052005" > target="_blank">eSmokes.com</a></b></p> > <table width="300" border="0" cellspacing="0" cellpadding="0"> > <tr> > <td width="170" class="small" valign="top">Toll > Free: 877-304-1808<br> > Fax Toll Free: 866-323-7765<br> > <a href="mailto:lena@esmokes.com">custserv@es > mokes.com</a></td> > <td width="130" class="small" valign="top">M-F > 8 a.m. - 6 p.m.<br> > Sat 9 a.m. - 5 p.m.<br> > Sun 10 a.m. - 4 p.m.</td> > </tr> > </table> > </td> > </tr> > </table> > </td> > </tr> > <tr> > <td align="center"><p class="text"><b><a > href="http://esmokes.directtrack.com/index.html?vAdCamp=email01052005" > target="_blank" class="red"><br> > Earn money as an eSmokes affiliate</a><br> > </b>At eSmokes.com, your satisfaction is our top priority.<br> > © > 2004 esmokes.com, all rights reserved. > To remove your e-mail address from our mailing list click on th > is link: > <a href="http://www.esmokes.com/unsubscribe.asp" target="_blank" > class="red">Remove your email</a></p> > </td> > </tr> > </table> > </td> > </tr> > </table> > > <map name="Map"> > <area shape="rect" coords="435,58,574,323" > href="http://www.esmokes.com/specialty_default_new.asp?vAdCamp=email0105200 > 5" target="_blank" alt="Shop for Great Gifts starting at $3.99!"> > <area shape="circle" coords="304,254,126" > href="http://www.esmokes.com/premium_cigar_default.asp?vAdCamp=email0105200 > 5" target="_blank" alt="Up to 55% OFF Premium Cigars!"> > <area shape="circle" coords="98,150,98" > href="http://www.esmokes.com/template1.asp?pageid=4&brandid=MARA&vAdCamp=Em > ail,12172003" target="_blank" alt="Marathon $10.59/ctn!"> > </map> > <map name="Map2"> > <area shape="rect" coords="172,57,318,86" > href="http://www.esmokes.com/domestic_default_new.asp?vAdCamp=email01052005 > " target="_blank" alt="Premium Cigarettes"> > <area shape="rect" coords="102,25,592,55" > href="http://www.esmokes.com/default.asp?vAdCamp=email01052005" > target="_blank" alt="eSmokes.com"> > <area shape="rect" coords="100,57,170,85" > href="http://www.esmokes.com/default.asp?vAdCamp=email01052005" > target="_blank" alt="eSmokes.com"> > <area shape="circle" coords="54,51,44" > href="http://www.esmokes.com/default.asp?vAdCamp=email01052005" > target="_blank" alt="eSmokes.com"> > <area shape="rect" coords="321,58,465,85" > href="http://www.esmokes.com/otherbrands_default_new.asp?vAdCamp=email01052 > 005" target="_blank" alt="Generic Cigarettes"> > <area shape="rect" coords="468,60,579,86" > href="http://www.esmokes.com/valuebrands_default_new.asp?vAdCamp=email01052 > 005" target="_blank" alt="Value Cigarettes"> > </map> > <a > href="http://www.esmokes.com/affiliate_program.asp?addcodeÍ150&bannerid=1 > 5 > &optionalinfo=&landid=0 "><img > src="http://esmokes.directtrack.com/42/150/15" alt="" border="0"></a> > </body> > </html> > > ------=_NextPart_000_0012_C0C2A8B8.59685100 > Content-Type: text/html; > charset="iso-8859-1" > Content-Transfer-Encoding: 8bit > > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" > "http://www.w3.org/TR/html4/loose.dtd"> > <html> > <head> > <title>Last Chance For Standard Delivery By Christmas!</title> > <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> > <style type="text/css"> >  > </style> > </head> > > <body> > <table width="582" border="1" align="center" cellpadding="0" cellspacing="0" bo > rdercolor="#660000"> > <tr> > <td width="582"> <table width="582" border="0" align="center" cellpadding"0" cellspacing="0"> > <tr> > <td align="center" valign="top"><img src="http://www.esmokes.com/email/im > ages/esmk_email_header_050105.gif" alt="eSmokes.com" width="582" height="104" b > order="0" align="left" usemap="#Map2"></td> > </tr> > <tr> > <td height="1" bgcolor="#999999"></td> > </tr> > <tr> > <td height="1" bgcolor="#999999"></td> > </tr> > <tr> > <td width="582" align="center" valign="top"> >  > <table width="582" border="0" cellspacing="2" cellpadding="2 > "> > <tr> > <td width="300" align="right" valign="top"><img src="ht > tp://www.esmokes.com/email/images/esmk_email_promo_050105.gif" alt="A New Year > of Savings"></td> > <td width="282" align="left" valign="top"> > > <table width="282" border="0" align="center" cellpaddin > g="0" cellspacing="0" id="coupon"> > <tr> > <td rowspan="3"><img src="http://www.esmokes.com/email/images/l > inevert.gif" height="150" width="1"></td> > <td height="1" width="300" valign="top"><img src="http://www.es > mokes.com/email/images/linehorz.gif" width="282" height="1"></td> > <td rowspan="3"><img src="http://www.esmokes.com/email/images/l > inevert.gif" height="150" width="1"></td> > </tr> > <tr> > <td valign="top" align="center"><table width="282" border="0" c > ellspacing="2" cellpadding="2"> > <tr> > <td width="1"> </td> > <td colspan="2" align="right"><table width="280" cellspac > ing="0" cellpadding="1" class="small" border="1" bordercolor="#000000"> > <tr> > <td bgcolor="#FFFFFF" width="120" align="center">eS > mokes.com eCoupon</td> > <td bgcolor="#FFFF00" width="160" align="center">EX > PIRES: 1/12/05 5pm EST</td> > </tr> > </table></td> > </tr> > <tr> > <td width="1"> </td> > <td class="text" valign="middle" width="192" align="left" > <p><font size="5" color="#CC0000">Only $9.99 for Unify with this eCoupon<br></ > font></p></td> > <td class="text" valign="top" width="90"><a href="http:// > www.esmokes.com/specials.asp?vAdCamp=email01052005" target="_blank"><img src="h > ttp://www.esmokes.com/email/images/collage_unify.gif" alt="Unify Coupon" width"77" height="80" border="0"></a></td> > </tr> > <tr> > <td colspan="3" width="282" align="left" class="text">Onl > ine purchases through <b>January 12th</b><br> > Enter eCoupon code <b>123UNIFY</b> at checkout</td> > </tr> > </table></td> > </tr> > <tr> > <td valign="bottom" align="center"><img src="http://www.esmokes > .com/email/images/linehorz.gif" width="290" height="1"></td> > </tr> > </table></td> > </tr> > </table> >  > </td> > </tr> > <tr> > <td colspan="2" align="left" valign="middle" class="small"><b>TERMS O > F eCOUPON OFFER:</b> This coupon is good on Unify online orders with valid eSmo > kes coupon code. Discount is only valid until 1/12/05 5pm EST. Limited to smoke > rs 21 years of age or older. Offer good only for eSmokes.com.</td> > </tr> > <tr> > <td align="center"> >  > <br> > <table width="562" border="0" cellspacing="0" c > ellpadding="0" align="center" id="products"> > <tr class="header"> > <td width="186" align="center" class="r > ed">Bronco on Sale</td> > <td align="center" width="186" class="r > ed">New Products at eSmokes!</td> > <td align="center" width="186" class="r > ed">Generic Brands</td> > </tr> > <tr> > <td width="186" align="center"><a href"http://www.esmokes.com/specials.asp?vAdCamp=email01052005" target="_blank"><im > g src="http://www.esmokes.com/images/styles/broncoFulFla.jpg" alt="Bronco On Sa > le!" border="0"></a></td> > <td width="186" align="center"><a href"http://www.esmokes.com/candybrands_default_new.asp?vAdCamp=email01052005" targ > et="_blank"><img src="http://www.esmokes.com/email/images/esmk_candy_promo_0501 > 05.jpg" alt="New Products at eSmokes!" border="0"></a></td> > <td width="186" align="center"><a href"http://www.esmokes.com/otherbrands_default_new.asp?vAdCamp=email01052005" targ > et="_blank"><img src="http://www.esmokes.com/images/gencollagesm.jpg" alt="Gene > ric Brands" border="0"></a></td> > </tr> > <tr> > <td width="186" align="center" class="grey" valign="top">Sa > ve 50¢ on all styles<br><br> > <span class="red"><a href="http://www.esmokes.com/special > s.asp?vAdCamp=email01052005" target="_blank" class="text">Limited Time Offer!<b > r>All Bronco styles on Sale!</a></span></td> > <td width="186" align="center" class="g > rey" valign="top">Save on popular breath-<br>freshening gum and mints!<br> > <span class="red"><a href="http://www > .esmokes.com/specials.asp?vAdCamp=email01052005" target="_blank" class="text">< > br>View our Newest Products!</a></span></td> > <td width="186" align="center" class="g > rey" valign="top">Great deals on your<br> > favorite generics!<br> > <br> > <span class="red"><a href="http://www.esmokes.com/otherbr > ands_default_new.asp?vAdCamp=email01052005" target="_blank" class="text">Save o > n popular<br>generic brands!</a></span></td> > </tr> > <tr> > <td> </td> > <td> </td> > <td> </td> > </tr> > <tr> > <td width="186" align="center" class="red"> > Premium Cigarettes</td> > <td width="186" align="center" class="red"> > Specialty Brands</td> > <td width="186" align="center" class="red"> > Premium Cigars</td> > </tr> > <tr> > <td width="186" align="center"><a href="htt > p://www.esmokes.com/domestic_default_new.asp?vAdCamp=email01052005" target="_bl > ank"><img src="http://www.esmokes.com/images/precollagesm.jpg" alt="Premium Bra > nds" border="0"></a></td> > <td width="186" align="center"><a href="htt > p://www.esmokes.com/foreign_otherbrands_default_new.asp?vAdCamp=email010520…" > target="_blank"><img src="http://www.esmokes.com/images/forcollagesm.jpg" alt=" > Specialty Brands" border="0"></a></td> > <td width="186" align="center"><a href="htt > p://www.esmokes.com/premium_cigar_default.asp?vAdCamp=email01052005" target="_b > lank"><img src="http://www.esmokes.com/images/cigar_front.gif" alt="Premium Cig > ars" border="0"></a></td> > </tr> > <tr> > <td width="186" align="center" class="grey" > valign="top">Ultra low prices<br> > on all the best!<br> > <br> > <span class="red"><a href="http://www.esmokes.com/domesti > c_default_new.asp?vAdCamp=email01052005" target="_blank" class="text">Ultra low > prices on all<br>top premium brands</a></span></td> > <td width="186" align="center" class="grey" > valign="top">Great smokes from<br>around the World!<br> > <span class="red"><a href="http://www > .esmokes.com/foreign_otherbrands_default_new.asp?vAdCamp=email01052005" > target"_blank" class="text"><br>Save on Foreign &<br>Specialty > smokes</a></span>< > /td> > <td width="186" align="center" class="grey" > valign="top">A selection of the<br>world's finest cigars.<br><br> > <span class="red"><a href="http://www.esmokes.com/premium > _cigar_default.asp?vAdCamp=email01052005" target="_blank" class="text">Come loo > k inside<br>our humidor!!</a></span></td> > </tr> > </table><br> > >  > > </td> > </tr> > <tr> > <td class="text"> > <table width="570" border="0" cellspacing="2" cellpadding="2"> > <tr> > <td> > <p>From your friends at<br> > <b><a href="http://www.esmokes.com/default_new.asp?vAdCamp=email01052005" > target="_blank">eSmokes.com</a></b></p> > <table width="300" border="0" cellspacing="0" cellpadding="0"> > <tr> > <td width="170" class="small" valign="top">Toll > Free: 877-304-1808<br> > Fax Toll Free: 866-323-7765<br> > <a href="mailto:lena@esmokes.com">custserv@es > mokes.com</a></td> > <td width="130" class="small" valign="top">M-F > 8 a.m. - 6 p.m.<br> > Sat 9 a.m. - 5 p.m.<br> > Sun 10 a.m. - 4 p.m.</td> > </tr> > </table> > </td> > </tr> > </table> > </td> > </tr> > <tr> > <td align="center"><p class="text"><b><a href="http://esmokes.directtrack > .com/index.html?vAdCamp=email01052005" target="_blank" class="red"><br> > Earn money as an eSmokes affiliate</a><br> > </b>At eSmokes.com, your satisfaction is our top priority.<br> > © 2004 esmokes.com, all rights reserved. > To remove your e-mail address from our mailing list click on th > is link: <a href="http://www.esmokes.com/unsubscribe.asp" target="_blank" class > ="red">Remove your email</a></p> > </td> > </tr> > </table> > </td> > </tr> > </table> > > <map name="Map"> > <area shape="rect" coords="435,58,574,323" href="http://www.esmokes.com/speci > alty_default_new.asp?vAdCamp=email01052005" target="_blank" alt="Shop for Great > Gifts starting at $3.99!"> > <area shape="circle" coords="304,254,126" href="http://www.esmokes.com/premium_ > cigar_default.asp?vAdCamp=email01052005" target="_blank" alt="Up to 55% OFF Pre > mium Cigars!"> > <area shape="circle" coords="98,150,98" href="http://www.esmokes.com/template > 1.asp?pageid=4&brandid=MARA&vAdCamp=Email,12172003" target="_blank" alt="Marath > on $10.59/ctn!"> > </map> > <map name="Map2"> > <area shape="rect" coords="172,57,318,86" href="http://www.esmokes.com/domest > ic_default_new.asp?vAdCamp=email01052005" target="_blank" alt="Premium Cigarett > es"> > <area shape="rect" coords="102,25,592,55" href="http://www.esmokes.com/defaul > t.asp?vAdCamp=email01052005" target="_blank" alt="eSmokes.com"> > <area shape="rect" coords="100,57,170,85" href="http://www.esmokes.com/defaul > t.asp?vAdCamp=email01052005" target="_blank" alt="eSmokes.com"> > <area shape="circle" coords="54,51,44" href="http://www.esmokes.com/default.a > sp?vAdCamp=email01052005" target="_blank" alt="eSmokes.com"> > <area shape="rect" coords="321,58,465,85" href="http://www.esmokes.com/otherb > rands_default_new.asp?vAdCamp=email01052005" target="_blank" alt="Generic Cigar > ettes"> > <area shape="rect" coords="468,60,579,86" href="http://www.esmokes.com/valueb > rands_default_new.asp?vAdCamp=email01052005" target="_blank" alt="Value Cigaret > tes"> > </map> > <a > href="http://www.esmokes.com/affiliate_program.asp?addcodeÍ150&bannerid > &optionalinfo=&landid=0 "><img > src="http://esmokes.directtrack.com/42/150/15" alt="" border="0"></a> </body> > </html> > > ------=_NextPart_000_0012_C0C2A8B8.59685100-- > > ------- End of Forwarded Message -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Exmh CVS iD8DBQFB3OSfMJF5cimLx9ARAicnAJ0QnprftQ8ANoZySqvLbV0zkvoA8gCgoSzM gqKyZRammvYS2ZmWlkSKHFA= =0WEa -----END PGP SIGNATURE-----

2 1

Flyer for MIT spam conference?
by Jeff Chan 06 Jan '05

06 Jan '05

I hope folks going to the MIT spam conference will please consider mentioning SURBLs at least informally. In case it's useful, I've updated the flyer I gave out at CEAS: http://www.surbl.org/flyer.html Comments are welcomed. Jeff C. -- "If it appears in hams, then don't list it."

2 2

RE: [SURBL-Discuss] Thunderbird and SURBL?
by Chris Santerre 05 Jan '05

05 Jan '05

>-----Original Message----- >From: Tim A [mailto:tim-surbl@kosmo.com] >Sent: Wednesday, January 05, 2005 12:20 PM >To: discuss(a)lists.surbl.org >Subject: RE: [SURBL-Discuss] Thunderbird and SURBL? > > >> -----Original Message----- >> From: Chris Santerre <csanterre(a)merchantsoverseas.com> >> Date: Thu, 16 Dec 2004 17:07:29 -0500 >> Subject: RE: [SURBL-Discuss] Thunderbird and SURBL? >> To: "tim-surbl(a)kosmo.com" <tim-surbl(a)kosmo.com>, SURBL >Discussion list >> <discuss(a)lists.surbl.org> > >...snip... > >> We do have a list on surbl.org. Granted it isn't very >prominent. :) Perhaps >> Jeff will add you? > >Just following up on this. Have we been added to the list? >We've been using SURBL pretty well since the beginning of SURBL. > >Tim I don't think simplefilter is listed. Not that I can find anyway. I wish there was a seperate page on the SURBL site that said "Software that uses SURBL". I still think it is kind of lost in the external news section. Of course I don't see any mention of SURBL on the simplefilter site either ;) Chris Santerre System Admin and SARE/SURBL Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

2 1

RE: quick poll on SURBL hit %
by Dallas L. Engelken 05 Jan '05

05 Jan '05

> > Just curious as to what average percent of spam people see > SURBL hitting. In a non scientific manor, I average about 85% > or greater hitting SURBL for all spam that doesn't get > rejected by my MTA. I have a feeling if I clean up my results > a bit, that number would be even higher. > Okay, let me give you some real numbers from our inhouse mail for the last week.. As you can see, half the top rules are network tests, so people running without them (-L) are really missing out.. TOP SPAM RULES FIRED ------------------------------------------------------------------------ RANK RULE NAME COUNT %OFRULES %OFMAIL %OFSPAM ------------------------------------------------------------------------ 1 URIBL_SBL 1739 6.66% 50.71% 85.04% 2 HTML_MESSAGE 1586 6.07% 46.25% 77.56% 3 URIBL_WS_SURBL 1447 5.54% 42.20% 70.76% 4 URIBL_JP_SURBL 1373 5.26% 40.04% 67.14% 5 URIBL_OB_SURBL 1364 5.22% 39.78% 66.70% 6 DCC_CHECK 1047 4.01% 30.53% 51.20% 7 MIME_HTML_ONLY 995 3.81% 29.02% 48.66% 8 BAYES_99 949 3.63% 27.68% 46.41% 9 PYZOR_CHECK 860 3.29% 25.08% 42.05% 10 DIGEST_MULTIPLE 836 3.20% 24.38% 40.88% 11 URIBL_SC_SURBL 635 2.43% 18.52% 31.05% 12 RAZOR2_CF_RANGE_51_100 612 2.34% 17.85% 29.93% 13 RAZOR2_CHECK 604 2.31% 17.61% 29.54% 14 HTML_WEB_BUGS 496 1.90% 14.46% 24.25% 15 HTML_90_100 431 1.65% 12.57% 21.08% 16 HTML_IMAGE_RATIO_02 426 1.63% 12.42% 20.83% 17 MSGID_SPAM_LETTERS 330 1.26% 9.62% 16.14% 18 HTML_LINK_IMAGE_BUG 308 1.18% 8.98% 15.06% 19 URIBL_AB_SURBL 292 1.12% 8.52% 14.28% 20 BAYES_50 278 1.06% 8.11% 13.59% ------------------------------------------------------------------------ Oh and this is out of the stuff that actually makes it to the queue... Which is normally like 8-15% of the overall total connections, so these %OFSPAM numbers are probably conservative, but I really don't feel like shutting down rbl's just to get a true number :) d

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss