Discuss

discuss@lists.surbl.org

1862 discussions

Re: [SURBL-Discuss] SURBL and listing abuse address
by Rob McEwen (PowerView Systems) 20 Dec '04

20 Dec '04

Nick, "Joe Jobs" happen all the time. Usually via a virus which plays "musical chairs" with the address book and sometimes via a spammer maliciously attacking someone. Also, MANY or MOST of these viruses DO contain affiliate URLs and large portion of these ARE SURBL-listed. Therefore, your plan will hurt innocent parties very, very often (not just in cases where someone was wrongly listed in SURBL). But, your intentions are sound and maybe a workable idea will result from this discussion. Rob McEwen

1 0

MIT Spam conference
by William Stearns 18 Dec '04

18 Dec '04

Good day, all, I'll be attending the MIT spam conference this year, Jan 21st, 9-5. Details at http://www.spamconference.org/ . The registration is free, but they suggest an early registration before the conference fills up. I'd love a chance to meet other people working on spamassassin and surbl. Is anyone else planning on attending? Cheers, - Bill --------------------------------------------------------------------------- "God grant me the senility to accept the things I cannot change, The frustration to try to change things I cannot affect, and the wisdom to tell the difference." (Courtesy of Mike Ricketts <rickettm(a)ox.compsoc.net>) -------------------------------------------------------------------------- William Stearns (wstearns(a)pobox.com). Mason, Buildkernel, freedups, p0f, rsync-backup, ssh-keyinstall, dns-check, more at: http://www.stearns.org --------------------------------------------------------------------------

2 1

Re: [SURBL-Discuss] RE: MIT Spam conference
by Matt Yackley 17 Dec '04

17 Dec '04

Chris Santerre said: > > All registered. Unless we get some meltdown here, or my car feezes on the > way like last year, I'll be there! However, being a ninja, you won't see me! > :) J/K, my goal is to get my eyeball as close to the webcast camera. Just > so when I come home I can DL the movie and say "There is my eyeball!!!!" > > Do we get to bring air horns? > > Chris Santerre I'm planning on attending as well. -matt

1 0

RE: [SURBL-Discuss] Thunderbird and SURBL?
by Tim A 17 Dec '04

17 Dec '04

> -----Original Message----- > From: Jeff Chan <jeffc(a)surbl.org> > Date: Thu, 16 Dec 2004 16:35:20 -0800 > Subject: Re: [SURBL-Discuss] Thunderbird and SURBL? > To: Chris Santerre <csanterre(a)merchantsoverseas.com> > Cc: "tim-surbl(a)kosmo.com" <tim-surbl(a)kosmo.com>, SURBL Discussion list > <discuss(a)lists.surbl.org> > ...snip... > >>We have high regards for the SURBL folks and it is in the mix > >>of many methods we use to combat spam at SimpleFilter. We have a > >>POP3 and SMTP service that uses the same backend anti-spam > >>engine and can be used from Thunderbird as it works with any POP3 > >>email client. The SMTP service has some additional features I > >>won't go into here. > >> > > > Hi Tim! > > > Are you saying you will check during download and not download the messege > > if it thinks it is spam? Cause that would give you an A+ in my book! > > And a D+ in my book. It's more efficient to do these checks in > the mail server. If every POP3 user started checking all of > their mail against SURBLs (or other RBLs) our name servers would > start melting. Can we get an A+ re-instated!!! :) Everything is done on the server. We provide a service for POP3 not a client program of any sorts. > Tim, If you're going to do this, please make sure your program > is internally caching the lookups pretty heavily. For example, > make sure it's not checking the same domain more than once per > message (if it appears multiple times in the same message for > example). We are and have been caching lookups. > > > And secondly, please make sure you have a local whitelist! We have seen > > other companies using SURBL that don't whitelist the top doamins, like > > yahoo.com, w3.org, google.com,........ Those kinds of domains should be > > skipped from being looked up. > > Yes, please whitelist (don't check) say the top 100-200 of our > most often hit whitelist entries: > > http://www.surbl.org/dns-queries.whitelist.counts.txt > > That will save many unnecessary DNS queries. Will look into this.

2 1

RE: [SURBL-Discuss] Thunderbird and SURBL?
by Tim A 17 Dec '04

17 Dec '04

> -----Original Message----- > From: Jeff Chan <jeffc(a)surbl.org> > Date: Thu, 16 Dec 2004 16:45:49 -0800 > Subject: Re: [SURBL-Discuss] Thunderbird and SURBL? > To: SURBL Discuss <discuss(a)lists.surbl.org> > > > On Thursday, December 16, 2004, 4:35:20 PM, Jeff Chan wrote: > > It's more efficient to do these checks in > > the mail server. If every POP3 user started checking all of > > their mail against SURBLs (or other RBLs) our name servers would > > start melting. > > > Tim, If you're going to do this, please make sure your program > > is internally caching the lookups pretty heavily. For example, > > make sure it's not checking the same domain more than once per > > message (if it appears multiple times in the same message for > > example). > > OK Minor correction, I see that SimpleFilter is a POP3 proxy > service and not a client program. In other words, it is a > centralized server through which POP traffic passes. Please > still do: ...snip... Sorry, didn't see this when replied to the previous msg. Thanks for the correction. Tim

1 0

RE: MIT Spam conference
by Chris Santerre 17 Dec '04

17 Dec '04

>-----Original Message----- >From: William Stearns [mailto:wstearns@pobox.com] >Sent: Friday, December 17, 2004 3:53 PM >To: ML-spamassassin-talk; ml-surbl-discuss >Cc: William Stearns >Subject: MIT Spam conference > > >Good day, all, > I'll be attending the MIT spam conference this year, Jan 21st, >9-5. Details at http://www.spamconference.org/ . The registration is >free, but they suggest an early registration before the >conference fills >up. > I'd love a chance to meet other people working on >spamassassin and >surbl. Is anyone else planning on attending? > Cheers, > - Bill All registered. Unless we get some meltdown here, or my car feezes on the way like last year, I'll be there! However, being a ninja, you won't see me! :) J/K, my goal is to get my eyeball as close to the webcast camera. Just so when I come home I can DL the movie and say "There is my eyeball!!!!" Do we get to bring air horns? Chris Santerre System Admin and SARE/SURBL Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

2 1

RE: [SURBL-Discuss] not spam URL - http://www.templatezone.com/
by Chris Santerre 17 Dec '04

17 Dec '04

*sploooge!* >> >>Against my draconian seasond crank beliefs ,I would vote to >Whitelist them. >> >>--Chris > >While it's against my draconian seasoned crank beliefs, too, we're >getting legitimate mail from one of our suppliers that uses one of >their templates, which has the URL embedded. > >-->Russ With undetectible stealth movement, I drew my katana and slashed templatezone from the SURBL list. ANd with my Shurikan of justice, have thrown them into the whitelist. In a puff of smoke.... I am gone. You saw nothing! :)

1 0

RE: [SURBL-Discuss] not spam URL - http://www.templatezone.com/
by Chris Santerre 17 Dec '04

17 Dec '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Thursday, December 16, 2004 7:10 PM >To: Russ Ringer >Cc: discuss(a)lists.surbl.org >Subject: Re: [SURBL-Discuss] not spam URL - >http://www.templatezone.com/ > > >On Thursday, December 16, 2004, 3:41:33 PM, Russ Ringer wrote: >> http://www.templatezone.com/ is just a place to get templates >> It should not be in SURBL > >They look like a legitimate business, but also sell some kind of >mailing software: > > http://www.templatezone.com/html-email-software/high-impact-email.asp > >"Affordable email marketing for business professionals > >Energize your email marketing messages with High Impact eMail >3.0. Get your recipient's attention. Get noticed. Stand out. Get >the results you want." > > >I lean towards whitelisting, but might like to hear why the WS >guys originally added them (long ago): > >/home/wstearns/black-wstearns-sa-blacklist.200406281446.domains >:templatezone.com > >Any comments WS folks? While I think any company that sells mass email software that is used to send spam should be blacklisted, this case isn't straight black. Their software isn't one of the larger ratware packages, and it is more legit. Yes it has been used to send spam. No doubt about that. But those seem to have other, more evil, URLs in them. So we could hit off of those. Against my draconian seasond crank beliefs ,I would vote to Whitelist them. --Chris

2 1

RE: [SURBL-Discuss] Thunderbird and SURBL?
by Chris Santerre 17 Dec '04

17 Dec '04

>-----Original Message----- >From: Tim A [mailto:tim-surbl@kosmo.com] >Sent: Thursday, December 16, 2004 4:37 PM >To: discuss(a)lists.surbl.org >Subject: RE: [SURBL-Discuss] Thunderbird and SURBL? > > >> -----Original Message----- >> From: Jeff Chan <jeffc(a)surbl.org> >> Date: Mon, 13 Dec 2004 17:21:59 -0800 >> Subject: Re: [SURBL-Discuss] Thunderbird and SURBL? >> To: "SURBL Discussion list (E-mail)" <discuss(a)lists.surbl.org> >> >> On Monday, December 13, 2004, 8:14:51 AM, Chris Santerre wrote: >> > Thinking out loud.... >> >> > Anyone have contact with thunderbird devs? Could a pop >proxy be used to >> > check emails being downloaded by thunderbird on SURBL, >then decline to >> > download the ones that hit? Obviously with whitelist bypasses? >> >> > Then the user could use a web client to delete spams without >> > downloading? Or >> > whatever..... >> >> That's an interesting idea, but it could generate more DNS >> traffic than our name servers can handle. It's probably >> better to do these kinds of things in a centralized way >> on mail servers to take advantage of DNS caching, etc. >> more strongly. > >Since we provide a service to do just this using SURBL >hopefully this isn't taken as a spam to this list. I thought >it would be >useful for folks at SURBL and list members to know who use >SURBL. Perhaps a list should be kept somewhere listing folks making >use of SURBL. > >We have high regards for the SURBL folks and it is in the mix >of many methods we use to combat spam at SimpleFilter. We have a >POP3 and SMTP service that uses the same backend anti-spam >engine and can be used from Thunderbird as it works with any POP3 >email client. The SMTP service has some additional features I >won't go into here. > Hi Tim! Are you saying you will check during download and not download the messege if it thinks it is spam? Cause that would give you an A+ in my book! And secondly, please make sure you have a local whitelist! We have seen other companies using SURBL that don't whitelist the top doamins, like yahoo.com, w3.org, google.com,........ Those kinds of domains should be skipped from being looked up. We do have a list on surbl.org. Granted it isn't very prominent. :) Perhaps Jeff will add you? --Chris

2 2

not spam URL - http://www.templatezone.com/
by Russ Ringer 17 Dec '04

17 Dec '04

http://www.templatezone.com/ is just a place to get templates It should not be in SURBL

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss