Discuss

discuss@lists.surbl.org

1870 discussions

Re: [SURBL-Discuss] FP: rgc3.net
by Rob McEwen (PowerView Systems) 01 Dec '04

01 Dec '04

RE: rgc3.net After looking into this some more, I also found it in the header of a legitimate OfficeDepot newsletter Rob McEwen

1 0

RE: [SURBL-Discuss] virtumundo.com
by Paul Schwarz 01 Dec '04

01 Dec '04

Shows up on this page http://www.stearns.org/sa-blacklist/sa-blacklist.current.domains Paul Schwarz -----Original Message----- From: discuss-bounces(a)lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Jeff Chan Sent: Wednesday, December 01, 2004 11:06 AM To: Paul Schwarz Cc: 'SURBL Discussion list' Subject: Re: [SURBL-Discuss] virtumundo.com On Wednesday, December 1, 2004, 6:47:37 AM, Paul Schwarz wrote: > Why doesn't multi.surbl.org stop > virtumundo.com > It is listed in the ws.surbl.org if I look it up manually > the online surbl lookup tool doesn't detect it either. It's not listed for me: % dig virtumundo.com.ws.surbl.org a ; <<>> DiG 8.3 <<>> virtumundo.com.ws.surbl.org a ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10041 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUERY SECTION: ;; virtumundo.com.ws.surbl.org, type = A, class = IN Jeff C. -- "If it appears in hams, then don't list it." _______________________________________________ Discuss mailing list Discuss(a)lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss

1 0

RE: [SURBL-Discuss] Hi I'm new and I like SURBL
by Paul Schwarz 01 Dec '04

01 Dec '04

Thank you for your response ! Who on this list was using greylisting and then decided to turn it off. Looking for more feedback. What rates of spam detection are you getting with surbl ? And what methods do you use to complement it. I would like to run some RFC checks but some of them seem to stringent.... I.E - Reverse PTR checks, etc Thanks again ! Paul Schwarz Stark Truss Company, Inc. Senior Network Administrator (330) 478-2100 -----Original Message----- From: discuss-bounces(a)lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Chris Santerre Sent: Tuesday, November 30, 2004 9:53 AM To: 'SURBL Discussion list' Subject: RE: [SURBL-Discuss] Hi I'm new and I like SURBL >-----Original Message----- >From: Paul Schwarz [mailto:Paul.Schwarz@starktruss.com] >Sent: Tuesday, November 30, 2004 9:03 AM >To: 'SURBL Discussion list' >Subject: [SURBL-Discuss] Hi I'm new and I like SURBL > Greetings noob, I mean Paul :-) >what are others thoughts of the effectiveness of SURBL , risks of false >positives, CPU usage, etc SURBL rocks, but I'm a bit partial. The risks of FP are low, and we strive to get them to zero. And anything reported as an FP is dealt with right away, by numerous people. We take them very seriously. Lookups are quick and getting quicker with each new mirror added. If you have a LOT of traffic you can rsync to get lookups local. Directions are on the SURBL.org site. > >I'm currently doing my spam checking in this order > >sbl-xbl.spamhaus.org - reject at SMTP level standard greylisting SURBL >- using multi.surbl.org I like everything but greylisting. It can have some issues when a timely email is needed. Particularly with airline info. We've seen it here from another SURBL contributor. > >How are you guys doing it and do you have any suggestions ? >Low false >positives are my goal in my setup. I wondered if surbl should replace >greylisting or RBL or should just complement. Complement is always better, but if anything I would remove greylisting for now. With SURBL I don't think you need it. But if you have the time and don't mind waiting sometimes 20 minutes for some companies to resend, then go ahead. I think you will be very happy with SURBL. Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin _______________________________________________ Discuss mailing list Discuss(a)lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss

4 5

virtumundo.com
by Paul Schwarz 01 Dec '04

01 Dec '04

Why doesn't multi.surbl.org stop virtumundo.com It is listed in the ws.surbl.org if I look it up manually the online surbl lookup tool doesn't detect it either. Paul Schwarz Stark Truss Company, Inc. Senior Network Administrator (330) 478-2100

2 1

Hi I'm new and I like SURBL
by Paul Schwarz 01 Dec '04

01 Dec '04

what are others thoughts of the effectiveness of SURBL , risks of false positives, CPU usage, etc I'm currently doing my spam checking in this order sbl-xbl.spamhaus.org - reject at SMTP level standard greylisting SURBL - using multi.surbl.org How are you guys doing it and do you have any suggestions ? Low false positives are my goal in my setup. I wondered if surbl should replace greylisting or RBL or should just complement. thank you Paul

2 1

RE: [SURBL-Discuss] Hi I'm new and I like SURBL
by Kristopher Austin 30 Nov '04

30 Nov '04

Paul, if you are still interested in greylisting you might consider a solution that allows you to run SpamAssassin at SMTP time. I use sa-exim (I believe there are others for different MTAs) and this allows me to greylist based on score. For example, if the score is above 3 points then it is greylisted, otherwise it is immediately let through. However, I would go with Chris's suggestion first and see if you even need to bother. In our situation, we have to be very liberal on the score to keep the FP's down, so we use greylisting on the uncertainties. Kris -----Original Message----- From: discuss-bounces(a)lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Chris Santerre Sent: Tuesday, November 30, 2004 8:53 AM To: 'SURBL Discussion list' Subject: RE: [SURBL-Discuss] Hi I'm new and I like SURBL >-----Original Message----- >From: Paul Schwarz [mailto:Paul.Schwarz@starktruss.com] >Sent: Tuesday, November 30, 2004 9:03 AM >To: 'SURBL Discussion list' >Subject: [SURBL-Discuss] Hi I'm new and I like SURBL > Greetings noob, I mean Paul :-) >what are others thoughts of the effectiveness of SURBL , risks of false >positives, CPU usage, etc SURBL rocks, but I'm a bit partial. The risks of FP are low, and we strive to get them to zero. And anything reported as an FP is dealt with right away, by numerous people. We take them very seriously. Lookups are quick and getting quicker with each new mirror added. If you have a LOT of traffic you can rsync to get lookups local. Directions are on the SURBL.org site. > >I'm currently doing my spam checking in this order > >sbl-xbl.spamhaus.org - reject at SMTP level >standard greylisting >SURBL - using multi.surbl.org I like everything but greylisting. It can have some issues when a timely email is needed. Particularly with airline info. We've seen it here from another SURBL contributor. > >How are you guys doing it and do you have any suggestions ? >Low false >positives are my goal in my setup. I wondered if surbl should replace >greylisting or RBL or should just complement. Complement is always better, but if anything I would remove greylisting for now. With SURBL I don't think you need it. But if you have the time and don't mind waiting sometimes 20 minutes for some companies to resend, then go ahead. I think you will be very happy with SURBL. Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin _______________________________________________ Discuss mailing list Discuss(a)lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss

1 0

RE: [SURBL-Discuss] Hi I'm new and I like SURBL
by Chris Santerre 30 Nov '04

30 Nov '04

>-----Original Message----- >From: Paul Schwarz [mailto:Paul.Schwarz@starktruss.com] >Sent: Tuesday, November 30, 2004 9:03 AM >To: 'SURBL Discussion list' >Subject: [SURBL-Discuss] Hi I'm new and I like SURBL > Greetings noob, I mean Paul :-) >what are others thoughts of the effectiveness of SURBL , risks of false >positives, CPU usage, etc SURBL rocks, but I'm a bit partial. The risks of FP are low, and we strive to get them to zero. And anything reported as an FP is dealt with right away, by numerous people. We take them very seriously. Lookups are quick and getting quicker with each new mirror added. If you have a LOT of traffic you can rsync to get lookups local. Directions are on the SURBL.org site. > >I'm currently doing my spam checking in this order > >sbl-xbl.spamhaus.org - reject at SMTP level >standard greylisting >SURBL - using multi.surbl.org I like everything but greylisting. It can have some issues when a timely email is needed. Particularly with airline info. We've seen it here from another SURBL contributor. > >How are you guys doing it and do you have any suggestions ? >Low false >positives are my goal in my setup. I wondered if surbl should replace >greylisting or RBL or should just complement. Complement is always better, but if anything I would remove greylisting for now. With SURBL I don't think you need it. But if you have the time and don't mind waiting sometimes 20 minutes for some companies to resend, then go ahead. I think you will be very happy with SURBL. Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

1 0

how does the white list work ?
by Paul Schwarz 29 Nov '04

29 Nov '04

I use multi.surbl.org to check the emails and wondered is there a whitelist for each individual surbl list or one the encompasses them all ? Who maintains it etc. thanks much ! Paul Schwarz Stark Truss Company, Inc. Senior Network Administrator (330) 478-2100

3 2

RE: [SURBL-Discuss] how does the white list work ?
by Paul Schwarz 29 Nov '04

29 Nov '04

Thank you for the web site! Sorry about the accidental double post Paul Schwarz -----Original Message----- From: discuss-bounces(a)lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Jeff Chan Sent: Monday, November 29, 2004 1:44 PM To: Paul Schwarz Cc: 'discuss(a)lists.surbl.org' Subject: Re: [SURBL-Discuss] how does the white list work ? On Monday, November 29, 2004, 10:17:24 AM, Paul Schwarz wrote: > I use multi.surbl.org to check the emails and wondered is there a whitelist > for each individual surbl list or one the encompasses them all ? Who > maintains it etc. Individual lists (data sources) may have their own internal whitelists which cause exclusions from those lists, but there are also shared whitelists which get sorted together and globally applied across all SURBLs. The former would be largely invisible to the outside world. The latter can be found at: http://spamcheck.freeapp.net/whitelist-domains.sort but it includes a lot of high-level geographic domains. Raymond, Various people are using our whitelist. Perhaps we could consider putting it on the rsync server for more efficient transfers. Jeff C. -- "If it appears in hams, then don't list it." _______________________________________________ Discuss mailing list Discuss(a)lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss

1 0

RE: [SURBL-Discuss] how does the white list work ?
by Paul Schwarz 29 Nov '04

29 Nov '04

Paul Schwarz Stark Truss Company, Inc. Senior Network Administrator (330) 478-2100 -----Original Message----- From: discuss-bounces(a)lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Paul Schwarz Sent: Monday, November 29, 2004 1:17 PM To: 'discuss(a)lists.surbl.org' Subject: [SURBL-Discuss] how does the white list work ? I use multi.surbl.org to check the emails and wondered is there a whitelist for each individual surbl list or one the encompasses them all ? Who maintains it etc. thanks much ! Paul Schwarz Stark Truss Company, Inc. Senior Network Administrator (330) 478-2100 _______________________________________________ Discuss mailing list Discuss(a)lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss