Shows up on this page
http://www.stearns.org/sa-blacklist/sa-blacklist.current.domains
Paul Schwarz
-----Original Message-----
From: discuss-bounces(a)lists.surbl.org
[mailto:discuss-bounces@lists.surbl.org] On Behalf Of Jeff Chan
Sent: Wednesday, December 01, 2004 11:06 AM
To: Paul Schwarz
Cc: 'SURBL Discussion list'
Subject: Re: [SURBL-Discuss] virtumundo.com
On Wednesday, December 1, 2004, 6:47:37 AM, Paul Schwarz wrote:
> Why doesn't multi.surbl.org stop
> virtumundo.com
> It is listed in the ws.surbl.org if I look it up manually
> the online surbl lookup tool doesn't detect it either.
It's not listed for me:
% dig virtumundo.com.ws.surbl.org a
; <<>> DiG 8.3 <<>> virtumundo.com.ws.surbl.org a ;; res options: init
recurs defnam dnsrch ;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10041 ;; flags: qr aa
rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUERY SECTION:
;; virtumundo.com.ws.surbl.org, type = A, class = IN
Jeff C.
--
"If it appears in hams, then don't list it."
_______________________________________________
Discuss mailing list
Discuss(a)lists.surbl.org
http://lists.surbl.org/mailman/listinfo/discuss
Thank you for your response !
Who on this list was using greylisting and then decided to turn it off.
Looking for more feedback.
What rates of spam detection are you getting with surbl ? And what methods
do you use to complement it. I would like to run some RFC checks but some
of them seem to stringent.... I.E - Reverse PTR checks, etc
Thanks again !
Paul Schwarz
Stark Truss Company, Inc.
Senior Network Administrator
(330) 478-2100
-----Original Message-----
From: discuss-bounces(a)lists.surbl.org
[mailto:discuss-bounces@lists.surbl.org] On Behalf Of Chris Santerre
Sent: Tuesday, November 30, 2004 9:53 AM
To: 'SURBL Discussion list'
Subject: RE: [SURBL-Discuss] Hi I'm new and I like SURBL
>-----Original Message-----
>From: Paul Schwarz [mailto:Paul.Schwarz@starktruss.com]
>Sent: Tuesday, November 30, 2004 9:03 AM
>To: 'SURBL Discussion list'
>Subject: [SURBL-Discuss] Hi I'm new and I like SURBL
>
Greetings noob, I mean Paul :-)
>what are others thoughts of the effectiveness of SURBL , risks of false
>positives, CPU usage, etc
SURBL rocks, but I'm a bit partial. The risks of FP are low, and we strive
to get them to zero. And anything reported as an FP is dealt with right
away, by numerous people. We take them very seriously.
Lookups are quick and getting quicker with each new mirror added. If you
have a LOT of traffic you can rsync to get lookups local. Directions are on
the SURBL.org site.
>
>I'm currently doing my spam checking in this order
>
>sbl-xbl.spamhaus.org - reject at SMTP level standard greylisting SURBL
>- using multi.surbl.org
I like everything but greylisting. It can have some issues when a timely
email is needed. Particularly with airline info. We've seen it here from
another SURBL contributor.
>
>How are you guys doing it and do you have any suggestions ?
>Low false
>positives are my goal in my setup. I wondered if surbl should replace
>greylisting or RBL or should just complement.
Complement is always better, but if anything I would remove greylisting for
now. With SURBL I don't think you need it. But if you have the time and
don't mind waiting sometimes 20 minutes for some companies to resend, then
go ahead.
I think you will be very happy with SURBL.
Chris Santerre
System Admin and SARE Ninja
http://www.rulesemporium.comhttp://www.surbl.org
'It is not the strongest of the species that survives, not the most
intelligent, but the one most responsive to change.'
Charles Darwin
_______________________________________________
Discuss mailing list
Discuss(a)lists.surbl.org
http://lists.surbl.org/mailman/listinfo/discuss
Why doesn't multi.surbl.org stop
virtumundo.com
It is listed in the ws.surbl.org if I look it up manually
the online surbl lookup tool doesn't detect it either.
Paul Schwarz
Stark Truss Company, Inc.
Senior Network Administrator
(330) 478-2100
what are others thoughts of the effectiveness of SURBL , risks of false
positives, CPU usage, etc
I'm currently doing my spam checking in this order
sbl-xbl.spamhaus.org - reject at SMTP level
standard greylisting
SURBL - using multi.surbl.org
How are you guys doing it and do you have any suggestions ? Low false
positives are my goal in my setup. I wondered if surbl should replace
greylisting or RBL or should just complement.
thank you
Paul
Paul, if you are still interested in greylisting you might consider a
solution that allows you to run SpamAssassin at SMTP time. I use
sa-exim (I believe there are others for different MTAs) and this allows
me to greylist based on score. For example, if the score is above 3
points then it is greylisted, otherwise it is immediately let through.
However, I would go with Chris's suggestion first and see if you even
need to bother. In our situation, we have to be very liberal on the
score to keep the FP's down, so we use greylisting on the uncertainties.
Kris
-----Original Message-----
From: discuss-bounces(a)lists.surbl.org
[mailto:discuss-bounces@lists.surbl.org] On Behalf Of Chris Santerre
Sent: Tuesday, November 30, 2004 8:53 AM
To: 'SURBL Discussion list'
Subject: RE: [SURBL-Discuss] Hi I'm new and I like SURBL
>-----Original Message-----
>From: Paul Schwarz [mailto:Paul.Schwarz@starktruss.com]
>Sent: Tuesday, November 30, 2004 9:03 AM
>To: 'SURBL Discussion list'
>Subject: [SURBL-Discuss] Hi I'm new and I like SURBL
>
Greetings noob, I mean Paul :-)
>what are others thoughts of the effectiveness of SURBL , risks of false
>positives, CPU usage, etc
SURBL rocks, but I'm a bit partial. The risks of FP are low, and we
strive
to get them to zero. And anything reported as an FP is dealt with right
away, by numerous people. We take them very seriously.
Lookups are quick and getting quicker with each new mirror added. If you
have a LOT of traffic you can rsync to get lookups local. Directions are
on
the SURBL.org site.
>
>I'm currently doing my spam checking in this order
>
>sbl-xbl.spamhaus.org - reject at SMTP level
>standard greylisting
>SURBL - using multi.surbl.org
I like everything but greylisting. It can have some issues when a timely
email is needed. Particularly with airline info. We've seen it here from
another SURBL contributor.
>
>How are you guys doing it and do you have any suggestions ?
>Low false
>positives are my goal in my setup. I wondered if surbl should replace
>greylisting or RBL or should just complement.
Complement is always better, but if anything I would remove greylisting
for
now. With SURBL I don't think you need it. But if you have the time and
don't mind waiting sometimes 20 minutes for some companies to resend,
then
go ahead.
I think you will be very happy with SURBL.
Chris Santerre
System Admin and SARE Ninja
http://www.rulesemporium.comhttp://www.surbl.org
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
Charles Darwin
_______________________________________________
Discuss mailing list
Discuss(a)lists.surbl.org
http://lists.surbl.org/mailman/listinfo/discuss
>-----Original Message-----
>From: Paul Schwarz [mailto:Paul.Schwarz@starktruss.com]
>Sent: Tuesday, November 30, 2004 9:03 AM
>To: 'SURBL Discussion list'
>Subject: [SURBL-Discuss] Hi I'm new and I like SURBL
>
Greetings noob, I mean Paul :-)
>what are others thoughts of the effectiveness of SURBL , risks of false
>positives, CPU usage, etc
SURBL rocks, but I'm a bit partial. The risks of FP are low, and we strive
to get them to zero. And anything reported as an FP is dealt with right
away, by numerous people. We take them very seriously.
Lookups are quick and getting quicker with each new mirror added. If you
have a LOT of traffic you can rsync to get lookups local. Directions are on
the SURBL.org site.
>
>I'm currently doing my spam checking in this order
>
>sbl-xbl.spamhaus.org - reject at SMTP level
>standard greylisting
>SURBL - using multi.surbl.org
I like everything but greylisting. It can have some issues when a timely
email is needed. Particularly with airline info. We've seen it here from
another SURBL contributor.
>
>How are you guys doing it and do you have any suggestions ?
>Low false
>positives are my goal in my setup. I wondered if surbl should replace
>greylisting or RBL or should just complement.
Complement is always better, but if anything I would remove greylisting for
now. With SURBL I don't think you need it. But if you have the time and
don't mind waiting sometimes 20 minutes for some companies to resend, then
go ahead.
I think you will be very happy with SURBL.
Chris Santerre
System Admin and SARE Ninja
http://www.rulesemporium.comhttp://www.surbl.org
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
Charles Darwin
I use multi.surbl.org to check the emails and wondered is there a whitelist
for each individual surbl list or one the encompasses them all ? Who
maintains it etc.
thanks much !
Paul Schwarz
Stark Truss Company, Inc.
Senior Network Administrator
(330) 478-2100
Thank you for the web site! Sorry about the accidental double post
Paul Schwarz
-----Original Message-----
From: discuss-bounces(a)lists.surbl.org
[mailto:discuss-bounces@lists.surbl.org] On Behalf Of Jeff Chan
Sent: Monday, November 29, 2004 1:44 PM
To: Paul Schwarz
Cc: 'discuss(a)lists.surbl.org'
Subject: Re: [SURBL-Discuss] how does the white list work ?
On Monday, November 29, 2004, 10:17:24 AM, Paul Schwarz wrote:
> I use multi.surbl.org to check the emails and wondered is there a
whitelist
> for each individual surbl list or one the encompasses them all ? Who
> maintains it etc.
Individual lists (data sources) may have their own internal whitelists which
cause exclusions from those lists, but there are also shared whitelists
which get sorted together and globally applied across all SURBLs. The
former would be largely invisible to the outside world. The latter can be
found at:
http://spamcheck.freeapp.net/whitelist-domains.sort
but it includes a lot of high-level geographic domains.
Raymond,
Various people are using our whitelist. Perhaps we could consider putting
it on the rsync server for more efficient transfers.
Jeff C.
--
"If it appears in hams, then don't list it."
_______________________________________________
Discuss mailing list
Discuss(a)lists.surbl.org
http://lists.surbl.org/mailman/listinfo/discuss
Paul Schwarz
Stark Truss Company, Inc.
Senior Network Administrator
(330) 478-2100
-----Original Message-----
From: discuss-bounces(a)lists.surbl.org
[mailto:discuss-bounces@lists.surbl.org] On Behalf Of Paul Schwarz
Sent: Monday, November 29, 2004 1:17 PM
To: 'discuss(a)lists.surbl.org'
Subject: [SURBL-Discuss] how does the white list work ?
I use multi.surbl.org to check the emails and wondered is there a whitelist
for each individual surbl list or one the encompasses them all ? Who
maintains it etc.
thanks much !
Paul Schwarz
Stark Truss Company, Inc.
Senior Network Administrator
(330) 478-2100
_______________________________________________
Discuss mailing list
Discuss(a)lists.surbl.org
http://lists.surbl.org/mailman/listinfo/discuss