- Discuss - Mailman 3

John Delisle/ho/Ceridian is out of the office.
by John_Delisle＠ceridian.ca 19 Apr '05

19 Apr '05

I will be out of the office starting 04/19/2005 and will not return until 04/20/2005. TESTING OUT OF OFFICE - I'm here..

2 2

Rsync access
by Bob Pierce 19 Apr '05

19 Apr '05

How do I request a change in our rsync access? I have sent 3 emails to raymond(a)prolocation.net and 2 web forms requesting access from our new server as we will be retiring our old server. I haven't heard any response back for the past month. Is there a particular person I should be contacting other than Raymond? Is it possible to get an eta on this? We're needing access changed to a new ip since we are pulling the old server out of production and retiring the old address. Thanks for your help, Bob Pierce Systems Analyst Westman Communications Group pierceb(a)westmancom.com

2 1

Stock Watch Alert
by Warren Robinson 19 Apr '05

19 Apr '05

Has anyone a rule to can these reports ! Regards warren

2 2

tips how to make a safe redirector
by Alain 16 Apr '05

16 Apr '05

Hi After seen the various msg's about open redirect's, I did a search about "safe" http redirectors, but didn't find many resources. While it's not that difficult to make a safe one with a manual whitelist, it's not in all scripts (.asp,.pl,php) easy to make a script that uses SURBL to block spammers. Such a script would have the big advantage that it could be generic. Are there available on the net? Could be a nice idea to add some links to those resources from the "letter to redirectors sites" page. Alain

4 5

Public Discussion List for URIBL.com
by Chris Santerre 15 Apr '05

15 Apr '05

For discussing the new lists, please use this one. http://lists.uribl.com/mailman/listinfo/uribl-discuss Per Jeff's request, please keep mainsleeze and open redirect discussions on this list and off the SURBL list. Thanks, --Chris

1 0

Open redirect @ tweakers.net
by Nick Askew 15 Apr '05

15 Apr '05

Here is another one http://www.tweakers.net/ext/lt.dsp?ref=p&LeverancierID=5637&ID=103132517&de… Nick Protect your domain from use by spammers. Set up an SPF record, read more about it here http://spf.pobox.com/. Find a Better Way of Life at www.marillion.com

1 0

RE: [SURBL-Discuss] RE: open redirect at US CONGRESS
by Chris Santerre 15 Apr '05

15 Apr '05

>-----Original Message----- >From: Alex Broens [mailto:surbl@alexb.ch] >Sent: Thursday, April 14, 2005 2:53 PM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] RE: open redirect at US CONGRESS > > >Chris Santerre wrote: >> LOL. I'm adding them all to my post to Spam-L. Hopefully >that will wake a fe >> of them up before we have to add them to the gray list! > >Chris... > >Do you realize that you're giving out this info to spammers as well as >spamfighters? Yup. I have my reasons :) > >Shouldn't we just keep a low profile on this and possibly contact the >admins of as many as possible and hope for them fixing? Been there, tried that. Doesn't work. > >Although it would be nice to have these in rbldns zone, sorry, but the >havoc these inclusions would cause are not worth trouble. No comment ;) > >Bayes, SA and SARE rules will take care of most cases without the need >of driving eachother nuts. Think open mail relays. Unless you block, no one will fix. Gmail doesn't run and open relay, because it would be blocked. The logic for open redirs is no different. --Chris

2 1

Open redirect dw.com.com
by Christiaan den Besten 15 Apr '05

15 Apr '05

Since it's open redir day :) http://dw.com.com/redir?destUrl=http://www.surbl.org/ bye, Chris

1 0

Re: [SURBL-Discuss] avsMUNGED-gold.com
by List Mail User 14 Apr '05

14 Apr '05

>... > >Hello! Sorry for the slow response, I was away yesterday. > >> Have you tried complaining to: >> >> % whois -h whois.abuse.net DTAG.DE >> abuse(a)t-ipnet.de (for dtag.de) >> sls.dk-cc(a)telekom.de (for dtag.de) > >I reported it to abuse(a)nic.telekom.de the owner of the ip 62.157.174.118 I >received the email from. After seeing this email, I also reported it to the >two addresses you suggested. > >> >> If so, what did they say? > >sls.dk-cc(a)telekom.de was accepted and then bounced by an exchange server. No >word back yet from abuse(a)nic.telekom.de or abuse(a)t-ipnet.de Jeff, Send the bounce to update(a)abuse.net, which should get it deleted. (Note: Following their own guidelines - do *not* send the spam and edit the message to just show the bounce - they may even insist on a 5xx code instead of a 4xx - I just don't know). An abuse.net address that bounces is in my opinion a better sign that a company is ill-behaved than just abuse@ bouncing. Maybe I'll code some rules for the DNS interface to abuse.net (there is example Perl code at http://abuse.net/using.phtml). > >> >> Jeff C. >> -- >> "If it appears in hams, then don't list it." >> >>... Paul Shupak track(a)plectere.com

1 0

Dell's open redirect try 2 (fwd)
by William Stearns 14 Apr '05

14 Apr '05

Good afternoon, Matt, Sorry to bug you, but who could we contact at Dell about an open redirector on Dell's web site? Thanks in advance! Cheers, - Bill --------------------------------------------------------------------------- "NT 5.0 is the last nail in the Unix coffin. Interestingly, Unix isn't in the coffin... It's wondering what the heck is sealing itself into a wooden box 6 feet underground..." (Courtesy of Jason McMullan <jmcc(a)grits.visus.com>) -------------------------------------------------------------------------- William Stearns (wstearns(a)pobox.com). Mason, Buildkernel, freedups, p0f, rsync-backup, ssh-keyinstall, dns-check, more at: http://www.stearns.org -------------------------------------------------------------------------- ---------- Forwarded message ---------- Date: Thu, 14 Apr 2005 12:18:21 -0400 From: Fred <tech2(a)i-is.com> Reply-To: SURBL Discussion list <discuss(a)lists.surbl.org> To: SURBL Discussion list <discuss(a)lists.surbl.org> Subject: [SURBL-Discuss] Dell's open redirect try 2 Too fast on my buttons, here's the link: http://landingstrip.dell.com/landingstrip/ls.asp?DURL=http://www.google.com/ Frederic Tarasevicius Internet Information Services, Inc. http://www.i-is.com/ 810-794-4400 _______________________________________________ Discuss mailing list Discuss(a)lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss

1 0

RE: [SURBL-Discuss] Capital One redirector
by Chris Santerre 14 Apr '05

14 Apr '05

>-----Original Message----- >From: John_Delisle(a)ceridian.ca [mailto:John_Delisle@ceridian.ca] >Sent: Thursday, April 14, 2005 2:31 PM >To: SURBL Discussion list >Subject: RE: [SURBL-Discuss] Capital One redirector > > >I'm not so sure - I suspect they may do nothing, and RBL will >go unused. > >How will the maintainers of this new RBL deal with either of these >scenarios? > >A - Mail admins start using the redir-SURBL or whatever >they're calling >it, and everyone complains that mail from these sites isn't >working, and >the admins are pressured into disabling the feature. This >will decrease >its the RBLs popularity, and there's no pressure on those >listed to work >to get off the list, since no one's using it. > >B - Because big organizations are listed, no one adopts it >because they >know it will be a nightmare to deal with complaints. There is >no pressure >to get off an un-used RBL, so no one changes the bad behaviour. > >Maybe I'm missing something, but since these domains are >included in SO >MANY ham emails, there's no chance I'd think of enabling this in my >environment. > >Perhaps the redirect-SURBL (or whatever it's called..) could >look at the >full URL, not just the FQDN. Really you don't want to block >dell.com, you >want to block dell.com/some-insecure-redir/foo.php etc. > >I hope this didn't all sound negative but to make this effort >worthwhile >someone has to figure it out. All good points John. And don't we haven't thought of that. We will have the ability to disable all the redirs listed in at our whim. So if it goes that way, we can do it. We can also right some rules for this. It took a awhile for people to block open relays. I expect this will go exactly the same way. And please, before Jeff has a heart attack, this has nothing to do with SURBL. Just call it the Gray URIBL. Otherwise Jeff will have gray hairs ;) --Chris

1 0

RE: [SURBL-Discuss] FULL open redirect on google
by Matthew Wilson 14 Apr '05

14 Apr '05

Well, yes, good point. Although I thought of another issue - that type of checking system would enable anyone to find out whether or not a domain is client of Google. > -----Original Message----- > From: discuss-bounces(a)lists.surbl.org > [mailto:discuss-bounces@lists.surbl.org] On Behalf Of > John_Delisle(a)ceridian.ca > Sent: Thursday, April 14, 2005 1:32 PM > To: SURBL Discussion list > Subject: RE: [SURBL-Discuss] FULL open redirect on google > > Isn't that how they pull search results? > > John Delisle, CISA > Senior Network Analyst, Network and Security Team Information > Systems & Technology Management Dept. > Ceridian Canada Ltd > 600 - 125 Garry St > Winnipeg, MB > R3C 3P2 > 204-975-5909

1 0

RE: Dell's open redirect try 2
by Chris Santerre 14 Apr '05

14 Apr '05

>-----Original Message----- >From: Fred [mailto:tech2@i-is.com] >Sent: Thursday, April 14, 2005 12:18 PM >To: SURBL Discussion list >Subject: Dell's open redirect try 2 > > >Too fast on my buttons, here's the link: >http://landingstrip.dell.com/landingstrip/ls.asp?DURL=http://ww >w.google.com/ Keep them coming Fred and Matt. How did you guys find these? I'm going to make a general post about all of these to the Spam-L list. --Chris

2 1

RE: [SURBL-Discuss] RE: open redirect at US CONGRESS
by Chris Santerre 14 Apr '05

14 Apr '05

LOL. I'm adding them all to my post to Spam-L. Hopefully that will wake a fe of them up before we have to add them to the gray list! --Chris >-----Original Message----- >From: Matthew Wilson [mailto:matthew@boomer.com] >Sent: Thursday, April 14, 2005 2:07 PM >To: SURBL Discussion list >Subject: [SURBL-Discuss] RE: open redirect at US CONGRESS > > >Oops; that site is not the US Congress..... Lol. Still, >they're an open redirect. > >> -----Original Message----- >> From: Matthew Wilson >> Sent: Thursday, April 14, 2005 12:26 PM >> To: 'SURBL Discussion list' >> Subject: open redirect at US CONGRESS >> >> >http://www.congress.org/congressorg/webreturn/?url=http://www.surbl.org > > >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss >

2 1

RE: [SURBL-Discuss] FULL open redirect on google
by Matthew Wilson 14 Apr '05

14 Apr '05

I don't know about *easily*.... I mean, we're talking about a database lookup in a table with probably hundreds of thousands records... > -----Original Message----- > From: discuss-bounces(a)lists.surbl.org > [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Daryl > C. W. O'Shea > Sent: Thursday, April 14, 2005 12:47 PM > To: SURBL Discussion list > Subject: Re: [SURBL-Discuss] FULL open redirect on google > > Matthew Wilson wrote: > > I might be wrong, but isn't the below url structure absolutely > > essential to Google's Adwords service? Otherwise, they > couldn't keep > > track of clicks.......... > > That doesn't mean it hasn't to be an open redirect. They > could easily limit it to domains that actually use the > Adwords service. > > _______________________________________________ > Discuss mailing list > Discuss(a)lists.surbl.org > http://lists.surbl.org/mailman/listinfo/discuss > > >

3 2

RE: [SURBL-Discuss] Capital One redirector
by Matthew Wilson 14 Apr '05

14 Apr '05

It'll be interesting when Microsoft, Google, Dell, and other huge sites are listed in that gray list. > All open redirs are going to be listed on our gray uribl > list. We are still finishing up the infrastructure now. > Already have a bunch of mirrors. So as soon as its up, I'm > sure a lot of these guys will sit up and take notice at their > emails being blocked. > > Our list will consider ANY open redirector to be in the same > category as an open mail relay. > > I've already started looking for more of these open redirs. > > --Chris > _______________________________________________ > Discuss mailing list > Discuss(a)lists.surbl.org > http://lists.surbl.org/mailman/listinfo/discuss > > >

2 1

RE: open redirect at US CONGRESS
by Matthew Wilson 14 Apr '05

14 Apr '05

Oops; that site is not the US Congress..... Lol. Still, they're an open redirect. > -----Original Message----- > From: Matthew Wilson > Sent: Thursday, April 14, 2005 12:26 PM > To: 'SURBL Discussion list' > Subject: open redirect at US CONGRESS > > http://www.congress.org/congressorg/webreturn/?url=http://www.surbl.org

1 0

RE: [SURBL-Discuss] FULL open redirect on google
by Matthew Wilson 14 Apr '05

14 Apr '05

I might be wrong, but isn't the below url structure absolutely essential to Google's Adwords service? Otherwise, they couldn't keep track of clicks.......... > -----Original Message----- > From: discuss-bounces(a)lists.surbl.org > [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Matthew Wilson > Sent: Thursday, April 14, 2005 11:38 AM > To: SURBL Discussion list > Subject: [SURBL-Discuss] FULL open redirect on google > > http://www.google.com/url?sa=U&start=1&q=http://www.SURBL.org&e > > > _______________________________________________ > Discuss mailing list > Discuss(a)lists.surbl.org > http://lists.surbl.org/mailman/listinfo/discuss > > >

3 2

Open redirect at Library of Congress
by Matthew Wilson 14 Apr '05

14 Apr '05

http://lcweb.loc.gov/cgi-bin/gourl?URL=http://www.surbl.org

1 0

Open redirect at govbenefits.gov
by Matthew Wilson 14 Apr '05

14 Apr '05

http://www.govbenefits.gov/es/govbenefits/externalLink.jhtml?url=http:// www.surbl.org

1 0

Open redirect at govloans.gov
by Matthew Wilson 14 Apr '05

14 Apr '05

http://www.govloans.gov/govloans/externalLink.jhtml?url=http://www.surbl .org

1 0

Open redirect at house.gov
by Matthew Wilson 14 Apr '05

14 Apr '05

http://www.bernie.house.gov/website/leavesite.asp?url=http://www.surbl.o rg

1 0

RE: [SURBL-Discuss] RE: Dell's open redirect try 2
by Chris Santerre 14 Apr '05

14 Apr '05

>-----Original Message----- >From: Matthew Wilson [mailto:matthew@boomer.com] >Sent: Thursday, April 14, 2005 1:18 PM >To: SURBL Discussion list >Subject: RE: [SURBL-Discuss] RE: Dell's open redirect try 2 > > >Just a bit of google "hacking". redirect.cgi, redir.cgi, redirect.asp >are all great terms with which you can use Google's "inurl:" operator. > Ahahahahahahha....guess what I printed out yesterday? :) This is exactly what I had planned to do!!! Great minds......... Keep them coming! --Chris

2 1

Open redirect at ..... naw, it couldn't be..... microsoft.com
by Matthew Wilson 14 Apr '05

14 Apr '05

http://www.microsoft.com/germany/businesssolutions/mbs_extern.asp?url=ht tp://www.surbl.org

1 0

open redirect at US CONGRESS
by Matthew Wilson 14 Apr '05

14 Apr '05

http://www.congress.org/congressorg/webreturn/?url=http://www.surbl.org

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss