- Discuss - Mailman 3

Fraudwatch.com
by benjamin＠divingislife.net 19 Jan '05

19 Jan '05

Fraudwatch.com seem to do a great job against phishing monitoring, do you think that it could be possible to work with them for the phising list ?

1 0

Anyone from SPEWS around?
by Raymond Dijkxhoorn 19 Jan '05

19 Jan '05

Hi! Sorry to bother all of you with this, but it might help solving a issue we seem to have with a old SPEWS listing: Could anyone involved with SPEWS or with contacts there ask them to remove a block they set in 2002/2003 ? http://www.spews.org/html/S1441.html The seem to have blocked a pretty large range, and that range is also including the SURBL mailinglist server. Obviously some people are missing posts when filtering with SPEWS. We have tried to contact SPEWS but they are not very responsive. We would be rather thankfull if they could exclude 81.23.230.0/24 from their listing, and even better remove the complete block they set. Thanks for your time. Bye, Raymond Dijkxhoorn - SURBL.

7 12

RE: [SURBL-Discuss] RFC: remove zone files from SURBL web site
by Chris Santerre 19 Jan '05

19 Jan '05

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Wednesday, January 19, 2005 6:06 AM >To: SURBL Discuss >Subject: [SURBL-Discuss] RFC: remove zone files from SURBL web site > > >I'd like to get rid of the sc and ws bind and rbldnsd zone files >from the SURBL web site and replace them with a note asking >people to use rsync instead. Does anyone have any comments on >this? We don't want people grabbing the zone files from the web >site since rsync is so much more efficient. > >Probably I would check the web logs and try to contact some of >the folks trying this also. > Makes sense to me. And if they don't stop, then deny their IP. Which is what I'm about to do to all those people still trying to download rules that haven't been on my server in almost a year! --Chris

2 1

New surbl client: Yasu
by benjamin＠divingislife.net 19 Jan '05

19 Jan '05

Hi all, I'm glad to announce another client for surbl: Yasu It work on WIN32/W2K and intend primarly to work with clearswift Mailsweeper, but should work with any other mail system that can run external script and interpret return codes. It is Release under the GNU GPL licence. You can download it at: www.divingislife.net/yasu Enjoy and send me comment.

2 1

FW: Semi-OT: Spammer sues spam-report
by Chris Santerre 18 Jan '05

18 Jan '05

I thought this was worth forwarding, as you never know when one of our projects may fall under this kind of silly thing. Also want to keep a good eye out on the Discovery aspect of it all. What spammers don't realize is that with this suit, we can now find out more about them. --Chris >-----Original Message----- >From: Matthew Cline [mailto:matt@nightrealms.com] >Sent: Monday, January 17, 2005 2:01 PM >To: ML-spamassassin-talk >Subject: Semi-OT: Spammer sues spam-report > > >A spammer is suing someone who reported their spam for >"Tortuous Interference >with Contract" and "Defamation": > >> The defendant knew intentionally and improperly interfered with the >> performance of the said contract by inducing Lightship Telecom and >> Spectra Access, Inc., to terminate the contracts. > >... > >> The defenandt induced the termination by intentionally making >> misrepresentation about ATRIKS and Brian Haberstroh to the said >> third parties. > >It would be funny if it weren't for Jay Stuler having to pay >legal fees for >all this; Jay can seriously use donations to help fight this. >I find it >interesting that they aren't suing Spamhaus.org or Spews.org, >which also have >"misrepresentations" about the spammers; looks rather like a >SLAPP lawsuit to >me. > >Jay posted the following to USENET: > >From: Jay Stuler <usenetjunk2004(a)yahoo.com> >Newsgroups: news.admin.net-abuse.email >Subject: Atriks lawsuit update >Date: Sat, 15 Jan 2005 22:22:03 -0500 > >> Hello gentle NANAE readers... > >> I found out this week that they declined my motion to dismiss. Yes >> - even though I am not a citizen of New Hampshire, and I have never >> been there, or done business there, they still decided I can be sued >> there. So the next stage of the suit begins - discovery. Some >> interesting things should come of this stage... > >> Unfortunately, this will cost quite a bit of money - which I still >> don't have. I need more donations to go further. But if I am >> financially able to go further, I am sure that many interesting >> things about Haberstroh's operation will be unearthed, if you know >> what I mean. > >> My lawyer made it quite clear to Haberstroh's lawyer that he will >> never receive any money, even with a judgement. Nevertheless, >> Haberstroh wishes to continue with the suit, to make spammers seem >> like the good guys. > >> I am still taking donations through PayPal. Every little bit helps. >> If there is any extra left over at the end of this (for some reason) >> it will be proportionately returned to the donors. The site with >> information on the suit is still at: >> http://spamlawsuit.spamshield.org I will update the site with more >> information as it comes to me. > >> Also please pass this on to anyone who you may think be >> interested... > >> Thanks > >-- >Give a man a match, and he'll be warm for a minute, but set him on >fire, and he'll be warm for the rest of his life. > >Advanced SPAM filtering software: http://spamassassin.org >

2 1

RE: [SURBL-Discuss] Re: quick poll on SURBL hit %
by Chris Santerre 18 Jan '05

18 Jan '05

I'm replying to both as I don't know if Terry is on the list..... >-----Original Message----- >From: Terry Sullivan [mailto:terry@pantos.org] >Sent: Monday, January 10, 2005 11:55 AM >To: discuss(a)lists.surbl.org >Subject: [SURBL-Discuss] Re: quick poll on SURBL hit % > > >Chris Santerre wrote: > >>Just curious as to what average percent of spam people see SURBL >>hitting. In a non scientific manor, I average about 85% ... > >I've run multiple analyses on historical datasets, and get a >consistent >*average* of 82%-86%, so 84% is a decent estimate. > >The most noteworthy statistical characteristic of the SURBL hit rate >over time is the large *variance* in hit rate. Some days, the >SURBL hit >rate I observe in my data is in the 60%'s, while other days its in the >90%'s. The fluctuation appears to be at least somewhat periodic in >nature (several "low" days in a row, followed by several >"high" days). >I've not actually run the numbers, but my totally informal, >*purely gut* >sense is that the magnitude of that variance may have >diminished lately, >but the periodic pattern persists. These periodic fluctuations imply >that there is probably some systematic cause underlying this variance, >and that cause is itself almost certainly periodic in nature. That is interesting! I wonder if this has become a Metric for actual spam traffic? Could it coincide with weekends? Don't suppose you could graph that data over a 365 day period? > >>I have a feeling if I clean up my >>results a bit, that number would be even higher. > >I've talked about this with Jeff several times, and he's even shared >some of my comments with this list. No one in the anti-spam >world likes >hearing this, but there is very strong evidence of a "hard" >statistical >detection limit right around ~85%. This limit appears to be more or >less independent of data set or detection method. Actually Jeff and I have discussed this, and I finally understood it :) I also agree with the 85% rule of yours. And we seem to be hitting it very nicely! I'm not sure Bayes even hits that close to 85%! --Chris

1 0

RE: [SURBL-Discuss] New surbl client: Yasu
by Chris Santerre 18 Jan '05

18 Jan '05

>-----Original Message----- >From: benjamin(a)divingislife.net [mailto:benjamin@divingislife.net] >Sent: Tuesday, January 18, 2005 10:55 AM >To: discuss(a)lists.surbl.org >Subject: [SURBL-Discuss] New surbl client: Yasu > > > >Hi all, > >I'm glad to announce another client for surbl: Yasu >It work on WIN32/W2K and intend primarly to work with >clearswift Mailsweeper, but should work >with any other mail system that can run external script and >interpret return codes. > >It is Release under the GNU GPL licence. > >You can download it at: >www.divingislife.net/yasu > >Enjoy and send me comment. > Nice. My first question is, does it have a local 'skip list' for the most noted domain names? Like google.com, yahoo.com. ect... It is pretty important to reduce traffic. --Chris

1 0

linkshield - Premium affiliate link protection
by Alex Broens 15 Jan '05

15 Jan '05

Guys, Getting spams with links to: http://secure. linkshield. com/?c=401&l=12 Seems this so called "Premium affiliate link protection" is being "abused". quite a few dicey nanas and "biz" & "mlm" newsgroup entries. They've been around for a while, but I really doubt if, in this case, that should be take in account. Comments? votes to SURBLize? Alex

2 1

Re: quick poll on SURBL hit %
by Terry Sullivan 10 Jan '05

10 Jan '05

Chris Santerre wrote: >Just curious as to what average percent of spam people see SURBL >hitting. In a non scientific manor, I average about 85% ... I've run multiple analyses on historical datasets, and get a consistent *average* of 82%-86%, so 84% is a decent estimate. The most noteworthy statistical characteristic of the SURBL hit rate over time is the large *variance* in hit rate. Some days, the SURBL hit rate I observe in my data is in the 60%'s, while other days its in the 90%'s. The fluctuation appears to be at least somewhat periodic in nature (several "low" days in a row, followed by several "high" days). I've not actually run the numbers, but my totally informal, *purely gut* sense is that the magnitude of that variance may have diminished lately, but the periodic pattern persists. These periodic fluctuations imply that there is probably some systematic cause underlying this variance, and that cause is itself almost certainly periodic in nature. >I have a feeling if I clean up my >results a bit, that number would be even higher. I've talked about this with Jeff several times, and he's even shared some of my comments with this list. No one in the anti-spam world likes hearing this, but there is very strong evidence of a "hard" statistical detection limit right around ~85%. This limit appears to be more or less independent of data set or detection method. This is not to say that only 85% of spam can be stopped; rather, it implies that no one *single* detection method broadly applicable to spam-as-a-whole can reliably (repeatably, predictably, consistently) snag more than ~85%. (At the risk of sounding testy, I am *not* looking to debate this point. Under the heading of "you can lead a horse to water," I'm content to have anyone to believe anything they like, even if it's demonstrably wrong. All I can do is report empirical results based on multiple analyses, multiple detection methods, multiple datasets, and multiple time periods. The observed ~85% detection limit is remarkably consistent across all these conditions.) One of the vaguely interesting research questions implicit in this result is the determination of the *unique* contribution of any given approach. That is, what %-age of spam *missed by all other approaches* does a particular detection method snag? On my *personal* spam corpus, SURBL's *unique* contribution is in the 18%-20% range.

1 0

using multi list as rhsbl
by Matt Egan (hotmail) 09 Jan '05

09 Jan '05

I was just curious if anyone had tried to use any of the surbl.org zones as an rhsbl at the mta level. I just turned it on in "warn only" mode on my postfix box. I did it on both the sender (mail from) and the client (ptr if available). just curious if anyone else had tried or does this. -Matt

2 1

securedata.net FP report
by Vincent Schonau 07 Jan '05

07 Jan '05

One of our users has reported a false positive on id294.securedata.net; securedata.net is listed in ws. I see no sightings more recent than june 2004; and none for this specific subdomain. The domain appears to belong to some sort of shopping-cart service-provider, but I'm unsure who (hostway?). They appear to assign distinct subdomains to distinct customers. What's the policy on this type of thing? To supply a full message I'll have to ask the customer for permission. I'd rather not send it to a publicly archived mailing list, however (customer data 'n all). Regards, -- Vincent Schonau XS4ALL Internet BV http://www.xs4all.nl/veiligheid/ Nieuwe spamfilters! http://www.xs4all.nl/nieuws/bericht.php?id=593

3 3

Re: [SURBL-Discuss] securedata.net FP report
by Jeff Chan 06 Jan '05

06 Jan '05

On Thursday, January 6, 2005, 5:28:18 AM, Alex Broens wrote: > Jeff, > It would be very appreciated if you would make new whitelisted URIs > public so those who run local zones can decide if the want to move a URL > to their private zone Hi Alex, The SURBL whitelist is available at: http://spamcheck.freeapp.net/whitelist-domains.sort Jeff C. -- "If it appears in hams, then don't list it."

2 2

quick poll on SURBL hit %
by Chris Santerre 06 Jan '05

06 Jan '05

Just curious as to what average percent of spam people see SURBL hitting. In a non scientific manor, I average about 85% or greater hitting SURBL for all spam that doesn't get rejected by my MTA. I have a feeling if I clean up my results a bit, that number would be even higher. Chris Santerre System Admin and SARE/SURBL Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

9 13

quick FP report (fwd)
by Justin Mason 06 Jan '05

06 Jan '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 esmokes.com -- not a spammy domain, I've been buying my cigarettes from them for aaaaages ;) Listed in JP and WS. - --j. - ------- Forwarded Message > Date: 06 Jan 2005 02:05:02 -0500 > From: "Esmokes Weekly Promotions" <sales(a)esmokes.com> > To: jm-esmokes(a)jmason.org > Subject: New Year Specials at eSmokes.com > > ------=_NextPart_000_0012_C0C2A8B8.59685100 > Content-Type: text/plain > Content-Transfer-Encoding: 8bit > > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" > "http://www.w3.org/TR/html4/loose.dtd"> > <html> > <head> > <title>Last Chance For Standard Delivery By Christmas!</title> > <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> > <style type="text/css"> >  > </style> > </head> > > <body> > <table width="582" border="1" align="center" cellpadding="0" > cellspacing="0" bordercolor="#660000"> > <tr> > <td width="582"> <table width="582" border="0" align="center" > cellpadding="0" cellspacing="0"> > <tr> > <td align="center" valign="top"><img > src="http://www.esmokes.com/email/images/esmk_email_header_050105.gif" > alt="eSmokes.com" width="582" height="104" border="0" align="left" > usemap="#Map2"></td> > </tr> > <tr> > <td height="1" bgcolor="#999999"></td> > </tr> > <tr> > <td height="1" bgcolor="#999999"></td> > </tr> > <tr> > <td width="582" align="center" valign="top"> >  > <table width="582" border="0" cellspacing="2" cellpadding="2 > "> > <tr> > <td width="300" align="right" valign="top"><img > src="http://www.esmokes.com/email/images/esmk_email_promo_050105.gif" > alt="A New Year of Savings"></td> > <td width="282" align="left" valign="top"> > > <table width="282" border="0" align="center" cellpaddin > g="0" > cellspacing="0" id="coupon"> > <tr> > <td rowspan="3"><img > src="http://www.esmokes.com/email/images/linevert.gif" height="150" > width="1"></td> > <td height="1" width="300" valign="top"><img > src="http://www.esmokes.com/email/images/linehorz.gif" width="282" > height="1"></td> > <td rowspan="3"><img > src="http://www.esmokes.com/email/images/linevert.gif" height="150" > width="1"></td> > </tr> > <tr> > <td valign="top" align="center"><table width="282" > border="0" cellspacing="2" cellpadding="2"> > <tr> > <td width="1"> </td> > <td colspan="2" align="right"><table width="280" > cellspacing="0" cellpadding="1" class="small" border="1" > bordercolor="#000000"> > <tr> > <td bgcolor="#FFFFFF" width="120" > align="center">eSmokes.com eCoupon</td> > <td bgcolor="#FFFF00" width="160" > align="center">EXPIRES: 1/12/05 5pm EST</td> > </tr> > </table></td> > </tr> > <tr> > <td width="1"> </td> > <td class="text" valign="middle" width="192" > align="left"><p><font size="5" color="#CC0000">Only $9.99 for Unify with > this eCoupon<br></font></p></td> > <td class="text" valign="top" width="90"><a > href="http://www.esmokes.com/specials.asp?vAdCamp=email01052005" > target="_blank"><img > src="http://www.esmokes.com/email/images/collage_unify.gif" alt="Unify > Coupon" width="77" height="80" border="0"></a></td> > </tr> > <tr> > <td colspan="3" width="282" align="left" > class="text">Online purchases through <b>January 12th</b><br> > Enter eCoupon code <b>123UNIFY</b> at checkout</td> > </tr> > </table></td> > </tr> > <tr> > <td valign="bottom" align="center"><img > src="http://www.esmokes.com/email/images/linehorz.gif" width="290" > height="1"></td> > </tr> > </table></td> > </tr> > </table> >  > </td> > </tr> > <tr> > <td colspan="2" align="left" valign="middle" class="small"><b>TERMS O > F > eCOUPON OFFER:</b> This coupon is good on Unify online orders with valid > eSmokes coupon code. Discount is only valid until 1/12/05 5pm EST. Limited > to smokers 21 years of age or older. Offer good only for eSmokes.com.</td> > </tr> > <tr> > <td align="center"> >  > <br> > <table width="562" border="0" cellspacing="0" c > ellpadding="0" > align="center" id="products"> > <tr class="header"> > <td width="186" align="center" class="r > ed">Bronco on Sale</td> > <td align="center" width="186" class="r > ed">New Products at > eSmokes!</td> > <td align="center" width="186" class="r > ed">Generic Brands</td> > </tr> > <tr> > <td width="186" align="center"><a > href="http://www.esmokes.com/specials.asp?vAdCamp=email01052005" > target="_blank"><img > src="http://www.esmokes.com/images/styles/broncoFulFla.jpg" alt="Bronco On > Sale!" border="0"></a></td> > <td width="186" align="center"><a > href="http://www.esmokes.com/candybrands_default_new.asp?vAdCamp=email01052 > 005" target="_blank"><img > src="http://www.esmokes.com/email/images/esmk_candy_promo_050105.jpg" > alt="New Products at eSmokes!" border="0"></a></td> > <td width="186" align="center"><a > href="http://www.esmokes.com/otherbrands_default_new.asp?vAdCamp=email01052 > 005" target="_blank"><img > src="http://www.esmokes.com/images/gencollagesm.jpg" alt="Generic Brands" > border="0"></a></td> > </tr> > <tr> > <td width="186" align="center" class="grey" > valign="top">Save 50¢ on all styles<br><br> > <span class="red"><a > href="http://www.esmokes.com/specials.asp?vAdCamp=email01052005" > target="_blank" class="text">Limited Time Offer!<br>All Bronco styles on > Sale!</a></span></td> > <td width="186" align="center" class="g > rey" valign="top">Save on > popular breath-<br>freshening gum and mints!<br> > <span class="red"><a > href="http://www.esmokes.com/specials.asp?vAdCamp=email01052005" > target="_blank" class="text"><br>View our Newest Products!</a></span></td> > <td width="186" align="center" class="g > rey" valign="top">Great deals > on your<br> > favorite generics!<br> > <br> > <span class="red"><a > href="http://www.esmokes.com/otherbrands_default_new.asp?vAdCamp=email01052 > 005" target="_blank" class="text">Save on popular<br>generic brands!</a> > </span></td> > </tr> > <tr> > <td> </td> > <td> </td> > <td> </td> > </tr> > <tr> > <td width="186" align="center" class="red"> > Premium Cigarettes</td> > <td width="186" align="center" class="red"> > Specialty Brands</td> > <td width="186" align="center" class="red"> > Premium Cigars</td> > </tr> > <tr> > <td width="186" align="center"><a > href="http://www.esmokes.com/domestic_default_new.asp?vAdCamp=email01052005 > " target="_blank"><img src="http://www.esmokes.com/images/precollagesm.jpg" > alt="Premium Brands" border="0"></a></td> > <td width="186" align="center"><a > href="http://www.esmokes.com/foreign_otherbrands_default_new.asp?vAdCamp=em > ail01052005" target="_blank"><img > src="http://www.esmokes.com/images/forcollagesm.jpg" alt="Specialty Brands" > border="0"></a></td> > <td width="186" align="center"><a > href="http://www.esmokes.com/premium_cigar_default.asp?vAdCamp=email0105200 > 5" target="_blank"><img src="http://www.esmokes.com/images/cigar_front.gif" > alt="Premium Cigars" border="0"></a></td> > </tr> > <tr> > <td width="186" align="center" class="grey" > valign="top">Ultra low > prices<br> > on all the best!<br> > <br> > <span class="red"><a > href="http://www.esmokes.com/domestic_default_new.asp?vAdCamp=email01052005 > " target="_blank" class="text">Ultra low prices on all<br>top premium > brands</a></span></td> > <td width="186" align="center" class="grey" > valign="top">Great > smokes from<br>around the World!<br> > <span class="red"><a > href="http://www.esmokes.com/foreign_otherbrands_default_new.asp?vAdCamp=em > ail01052005" target="_blank" class="text"><br>Save on Foreign &<br> > Specialty smokes</a></span></td> > <td width="186" align="center" class="grey" > valign="top">A > selection of the<br>world's finest cigars.<br><br> > <span class="red"><a > href="http://www.esmokes.com/premium_cigar_default.asp?vAdCamp=email0105200 > 5" target="_blank" class="text">Come look inside<br>our humidor!!</a> > </span></td> > </tr> > </table><br> > >  > > </td> > </tr> > <tr> > <td class="text"> > <table width="570" border="0" cellspacing="2" cellpadding="2"> > <tr> > <td> > <p>From your friends at<br> > <b><a > href="http://www.esmokes.com/default_new.asp?vAdCamp=email01052005" > target="_blank">eSmokes.com</a></b></p> > <table width="300" border="0" cellspacing="0" cellpadding="0"> > <tr> > <td width="170" class="small" valign="top">Toll > Free: 877-304-1808<br> > Fax Toll Free: 866-323-7765<br> > <a href="mailto:lena@esmokes.com">custserv@es > mokes.com</a></td> > <td width="130" class="small" valign="top">M-F > 8 a.m. - 6 p.m.<br> > Sat 9 a.m. - 5 p.m.<br> > Sun 10 a.m. - 4 p.m.</td> > </tr> > </table> > </td> > </tr> > </table> > </td> > </tr> > <tr> > <td align="center"><p class="text"><b><a > href="http://esmokes.directtrack.com/index.html?vAdCamp=email01052005" > target="_blank" class="red"><br> > Earn money as an eSmokes affiliate</a><br> > </b>At eSmokes.com, your satisfaction is our top priority.<br> > © > 2004 esmokes.com, all rights reserved. > To remove your e-mail address from our mailing list click on th > is link: > <a href="http://www.esmokes.com/unsubscribe.asp" target="_blank" > class="red">Remove your email</a></p> > </td> > </tr> > </table> > </td> > </tr> > </table> > > <map name="Map"> > <area shape="rect" coords="435,58,574,323" > href="http://www.esmokes.com/specialty_default_new.asp?vAdCamp=email0105200 > 5" target="_blank" alt="Shop for Great Gifts starting at $3.99!"> > <area shape="circle" coords="304,254,126" > href="http://www.esmokes.com/premium_cigar_default.asp?vAdCamp=email0105200 > 5" target="_blank" alt="Up to 55% OFF Premium Cigars!"> > <area shape="circle" coords="98,150,98" > href="http://www.esmokes.com/template1.asp?pageid=4&brandid=MARA&vAdCamp=Em > ail,12172003" target="_blank" alt="Marathon $10.59/ctn!"> > </map> > <map name="Map2"> > <area shape="rect" coords="172,57,318,86" > href="http://www.esmokes.com/domestic_default_new.asp?vAdCamp=email01052005 > " target="_blank" alt="Premium Cigarettes"> > <area shape="rect" coords="102,25,592,55" > href="http://www.esmokes.com/default.asp?vAdCamp=email01052005" > target="_blank" alt="eSmokes.com"> > <area shape="rect" coords="100,57,170,85" > href="http://www.esmokes.com/default.asp?vAdCamp=email01052005" > target="_blank" alt="eSmokes.com"> > <area shape="circle" coords="54,51,44" > href="http://www.esmokes.com/default.asp?vAdCamp=email01052005" > target="_blank" alt="eSmokes.com"> > <area shape="rect" coords="321,58,465,85" > href="http://www.esmokes.com/otherbrands_default_new.asp?vAdCamp=email01052 > 005" target="_blank" alt="Generic Cigarettes"> > <area shape="rect" coords="468,60,579,86" > href="http://www.esmokes.com/valuebrands_default_new.asp?vAdCamp=email01052 > 005" target="_blank" alt="Value Cigarettes"> > </map> > <a > href="http://www.esmokes.com/affiliate_program.asp?addcodeÍ150&bannerid=1 > 5 > &optionalinfo=&landid=0 "><img > src="http://esmokes.directtrack.com/42/150/15" alt="" border="0"></a> > </body> > </html> > > ------=_NextPart_000_0012_C0C2A8B8.59685100 > Content-Type: text/html; > charset="iso-8859-1" > Content-Transfer-Encoding: 8bit > > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" > "http://www.w3.org/TR/html4/loose.dtd"> > <html> > <head> > <title>Last Chance For Standard Delivery By Christmas!</title> > <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> > <style type="text/css"> >  > </style> > </head> > > <body> > <table width="582" border="1" align="center" cellpadding="0" cellspacing="0" bo > rdercolor="#660000"> > <tr> > <td width="582"> <table width="582" border="0" align="center" cellpadding"0" cellspacing="0"> > <tr> > <td align="center" valign="top"><img src="http://www.esmokes.com/email/im > ages/esmk_email_header_050105.gif" alt="eSmokes.com" width="582" height="104" b > order="0" align="left" usemap="#Map2"></td> > </tr> > <tr> > <td height="1" bgcolor="#999999"></td> > </tr> > <tr> > <td height="1" bgcolor="#999999"></td> > </tr> > <tr> > <td width="582" align="center" valign="top"> >  > <table width="582" border="0" cellspacing="2" cellpadding="2 > "> > <tr> > <td width="300" align="right" valign="top"><img src="ht > tp://www.esmokes.com/email/images/esmk_email_promo_050105.gif" alt="A New Year > of Savings"></td> > <td width="282" align="left" valign="top"> > > <table width="282" border="0" align="center" cellpaddin > g="0" cellspacing="0" id="coupon"> > <tr> > <td rowspan="3"><img src="http://www.esmokes.com/email/images/l > inevert.gif" height="150" width="1"></td> > <td height="1" width="300" valign="top"><img src="http://www.es > mokes.com/email/images/linehorz.gif" width="282" height="1"></td> > <td rowspan="3"><img src="http://www.esmokes.com/email/images/l > inevert.gif" height="150" width="1"></td> > </tr> > <tr> > <td valign="top" align="center"><table width="282" border="0" c > ellspacing="2" cellpadding="2"> > <tr> > <td width="1"> </td> > <td colspan="2" align="right"><table width="280" cellspac > ing="0" cellpadding="1" class="small" border="1" bordercolor="#000000"> > <tr> > <td bgcolor="#FFFFFF" width="120" align="center">eS > mokes.com eCoupon</td> > <td bgcolor="#FFFF00" width="160" align="center">EX > PIRES: 1/12/05 5pm EST</td> > </tr> > </table></td> > </tr> > <tr> > <td width="1"> </td> > <td class="text" valign="middle" width="192" align="left" > <p><font size="5" color="#CC0000">Only $9.99 for Unify with this eCoupon<br></ > font></p></td> > <td class="text" valign="top" width="90"><a href="http:// > www.esmokes.com/specials.asp?vAdCamp=email01052005" target="_blank"><img src="h > ttp://www.esmokes.com/email/images/collage_unify.gif" alt="Unify Coupon" width"77" height="80" border="0"></a></td> > </tr> > <tr> > <td colspan="3" width="282" align="left" class="text">Onl > ine purchases through <b>January 12th</b><br> > Enter eCoupon code <b>123UNIFY</b> at checkout</td> > </tr> > </table></td> > </tr> > <tr> > <td valign="bottom" align="center"><img src="http://www.esmokes > .com/email/images/linehorz.gif" width="290" height="1"></td> > </tr> > </table></td> > </tr> > </table> >  > </td> > </tr> > <tr> > <td colspan="2" align="left" valign="middle" class="small"><b>TERMS O > F eCOUPON OFFER:</b> This coupon is good on Unify online orders with valid eSmo > kes coupon code. Discount is only valid until 1/12/05 5pm EST. Limited to smoke > rs 21 years of age or older. Offer good only for eSmokes.com.</td> > </tr> > <tr> > <td align="center"> >  > <br> > <table width="562" border="0" cellspacing="0" c > ellpadding="0" align="center" id="products"> > <tr class="header"> > <td width="186" align="center" class="r > ed">Bronco on Sale</td> > <td align="center" width="186" class="r > ed">New Products at eSmokes!</td> > <td align="center" width="186" class="r > ed">Generic Brands</td> > </tr> > <tr> > <td width="186" align="center"><a href"http://www.esmokes.com/specials.asp?vAdCamp=email01052005" target="_blank"><im > g src="http://www.esmokes.com/images/styles/broncoFulFla.jpg" alt="Bronco On Sa > le!" border="0"></a></td> > <td width="186" align="center"><a href"http://www.esmokes.com/candybrands_default_new.asp?vAdCamp=email01052005" targ > et="_blank"><img src="http://www.esmokes.com/email/images/esmk_candy_promo_0501 > 05.jpg" alt="New Products at eSmokes!" border="0"></a></td> > <td width="186" align="center"><a href"http://www.esmokes.com/otherbrands_default_new.asp?vAdCamp=email01052005" targ > et="_blank"><img src="http://www.esmokes.com/images/gencollagesm.jpg" alt="Gene > ric Brands" border="0"></a></td> > </tr> > <tr> > <td width="186" align="center" class="grey" valign="top">Sa > ve 50¢ on all styles<br><br> > <span class="red"><a href="http://www.esmokes.com/special > s.asp?vAdCamp=email01052005" target="_blank" class="text">Limited Time Offer!<b > r>All Bronco styles on Sale!</a></span></td> > <td width="186" align="center" class="g > rey" valign="top">Save on popular breath-<br>freshening gum and mints!<br> > <span class="red"><a href="http://www > .esmokes.com/specials.asp?vAdCamp=email01052005" target="_blank" class="text">< > br>View our Newest Products!</a></span></td> > <td width="186" align="center" class="g > rey" valign="top">Great deals on your<br> > favorite generics!<br> > <br> > <span class="red"><a href="http://www.esmokes.com/otherbr > ands_default_new.asp?vAdCamp=email01052005" target="_blank" class="text">Save o > n popular<br>generic brands!</a></span></td> > </tr> > <tr> > <td> </td> > <td> </td> > <td> </td> > </tr> > <tr> > <td width="186" align="center" class="red"> > Premium Cigarettes</td> > <td width="186" align="center" class="red"> > Specialty Brands</td> > <td width="186" align="center" class="red"> > Premium Cigars</td> > </tr> > <tr> > <td width="186" align="center"><a href="htt > p://www.esmokes.com/domestic_default_new.asp?vAdCamp=email01052005" target="_bl > ank"><img src="http://www.esmokes.com/images/precollagesm.jpg" alt="Premium Bra > nds" border="0"></a></td> > <td width="186" align="center"><a href="htt > p://www.esmokes.com/foreign_otherbrands_default_new.asp?vAdCamp=email010520…" > target="_blank"><img src="http://www.esmokes.com/images/forcollagesm.jpg" alt=" > Specialty Brands" border="0"></a></td> > <td width="186" align="center"><a href="htt > p://www.esmokes.com/premium_cigar_default.asp?vAdCamp=email01052005" target="_b > lank"><img src="http://www.esmokes.com/images/cigar_front.gif" alt="Premium Cig > ars" border="0"></a></td> > </tr> > <tr> > <td width="186" align="center" class="grey" > valign="top">Ultra low prices<br> > on all the best!<br> > <br> > <span class="red"><a href="http://www.esmokes.com/domesti > c_default_new.asp?vAdCamp=email01052005" target="_blank" class="text">Ultra low > prices on all<br>top premium brands</a></span></td> > <td width="186" align="center" class="grey" > valign="top">Great smokes from<br>around the World!<br> > <span class="red"><a href="http://www > .esmokes.com/foreign_otherbrands_default_new.asp?vAdCamp=email01052005" > target"_blank" class="text"><br>Save on Foreign &<br>Specialty > smokes</a></span>< > /td> > <td width="186" align="center" class="grey" > valign="top">A selection of the<br>world's finest cigars.<br><br> > <span class="red"><a href="http://www.esmokes.com/premium > _cigar_default.asp?vAdCamp=email01052005" target="_blank" class="text">Come loo > k inside<br>our humidor!!</a></span></td> > </tr> > </table><br> > >  > > </td> > </tr> > <tr> > <td class="text"> > <table width="570" border="0" cellspacing="2" cellpadding="2"> > <tr> > <td> > <p>From your friends at<br> > <b><a href="http://www.esmokes.com/default_new.asp?vAdCamp=email01052005" > target="_blank">eSmokes.com</a></b></p> > <table width="300" border="0" cellspacing="0" cellpadding="0"> > <tr> > <td width="170" class="small" valign="top">Toll > Free: 877-304-1808<br> > Fax Toll Free: 866-323-7765<br> > <a href="mailto:lena@esmokes.com">custserv@es > mokes.com</a></td> > <td width="130" class="small" valign="top">M-F > 8 a.m. - 6 p.m.<br> > Sat 9 a.m. - 5 p.m.<br> > Sun 10 a.m. - 4 p.m.</td> > </tr> > </table> > </td> > </tr> > </table> > </td> > </tr> > <tr> > <td align="center"><p class="text"><b><a href="http://esmokes.directtrack > .com/index.html?vAdCamp=email01052005" target="_blank" class="red"><br> > Earn money as an eSmokes affiliate</a><br> > </b>At eSmokes.com, your satisfaction is our top priority.<br> > © 2004 esmokes.com, all rights reserved. > To remove your e-mail address from our mailing list click on th > is link: <a href="http://www.esmokes.com/unsubscribe.asp" target="_blank" class > ="red">Remove your email</a></p> > </td> > </tr> > </table> > </td> > </tr> > </table> > > <map name="Map"> > <area shape="rect" coords="435,58,574,323" href="http://www.esmokes.com/speci > alty_default_new.asp?vAdCamp=email01052005" target="_blank" alt="Shop for Great > Gifts starting at $3.99!"> > <area shape="circle" coords="304,254,126" href="http://www.esmokes.com/premium_ > cigar_default.asp?vAdCamp=email01052005" target="_blank" alt="Up to 55% OFF Pre > mium Cigars!"> > <area shape="circle" coords="98,150,98" href="http://www.esmokes.com/template > 1.asp?pageid=4&brandid=MARA&vAdCamp=Email,12172003" target="_blank" alt="Marath > on $10.59/ctn!"> > </map> > <map name="Map2"> > <area shape="rect" coords="172,57,318,86" href="http://www.esmokes.com/domest > ic_default_new.asp?vAdCamp=email01052005" target="_blank" alt="Premium Cigarett > es"> > <area shape="rect" coords="102,25,592,55" href="http://www.esmokes.com/defaul > t.asp?vAdCamp=email01052005" target="_blank" alt="eSmokes.com"> > <area shape="rect" coords="100,57,170,85" href="http://www.esmokes.com/defaul > t.asp?vAdCamp=email01052005" target="_blank" alt="eSmokes.com"> > <area shape="circle" coords="54,51,44" href="http://www.esmokes.com/default.a > sp?vAdCamp=email01052005" target="_blank" alt="eSmokes.com"> > <area shape="rect" coords="321,58,465,85" href="http://www.esmokes.com/otherb > rands_default_new.asp?vAdCamp=email01052005" target="_blank" alt="Generic Cigar > ettes"> > <area shape="rect" coords="468,60,579,86" href="http://www.esmokes.com/valueb > rands_default_new.asp?vAdCamp=email01052005" target="_blank" alt="Value Cigaret > tes"> > </map> > <a > href="http://www.esmokes.com/affiliate_program.asp?addcodeÍ150&bannerid > &optionalinfo=&landid=0 "><img > src="http://esmokes.directtrack.com/42/150/15" alt="" border="0"></a> </body> > </html> > > ------=_NextPart_000_0012_C0C2A8B8.59685100-- > > ------- End of Forwarded Message -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Exmh CVS iD8DBQFB3OSfMJF5cimLx9ARAicnAJ0QnprftQ8ANoZySqvLbV0zkvoA8gCgoSzM gqKyZRammvYS2ZmWlkSKHFA= =0WEa -----END PGP SIGNATURE-----

2 1

Flyer for MIT spam conference?
by Jeff Chan 06 Jan '05

06 Jan '05

I hope folks going to the MIT spam conference will please consider mentioning SURBLs at least informally. In case it's useful, I've updated the flyer I gave out at CEAS: http://www.surbl.org/flyer.html Comments are welcomed. Jeff C. -- "If it appears in hams, then don't list it."

2 2

RE: [SURBL-Discuss] Thunderbird and SURBL?
by Chris Santerre 05 Jan '05

05 Jan '05

>-----Original Message----- >From: Tim A [mailto:tim-surbl@kosmo.com] >Sent: Wednesday, January 05, 2005 12:20 PM >To: discuss(a)lists.surbl.org >Subject: RE: [SURBL-Discuss] Thunderbird and SURBL? > > >> -----Original Message----- >> From: Chris Santerre <csanterre(a)merchantsoverseas.com> >> Date: Thu, 16 Dec 2004 17:07:29 -0500 >> Subject: RE: [SURBL-Discuss] Thunderbird and SURBL? >> To: "tim-surbl(a)kosmo.com" <tim-surbl(a)kosmo.com>, SURBL >Discussion list >> <discuss(a)lists.surbl.org> > >...snip... > >> We do have a list on surbl.org. Granted it isn't very >prominent. :) Perhaps >> Jeff will add you? > >Just following up on this. Have we been added to the list? >We've been using SURBL pretty well since the beginning of SURBL. > >Tim I don't think simplefilter is listed. Not that I can find anyway. I wish there was a seperate page on the SURBL site that said "Software that uses SURBL". I still think it is kind of lost in the external news section. Of course I don't see any mention of SURBL on the simplefilter site either ;) Chris Santerre System Admin and SARE/SURBL Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

2 1

RE: quick poll on SURBL hit %
by Dallas L. Engelken 05 Jan '05

05 Jan '05

> > Just curious as to what average percent of spam people see > SURBL hitting. In a non scientific manor, I average about 85% > or greater hitting SURBL for all spam that doesn't get > rejected by my MTA. I have a feeling if I clean up my results > a bit, that number would be even higher. > Okay, let me give you some real numbers from our inhouse mail for the last week.. As you can see, half the top rules are network tests, so people running without them (-L) are really missing out.. TOP SPAM RULES FIRED ------------------------------------------------------------------------ RANK RULE NAME COUNT %OFRULES %OFMAIL %OFSPAM ------------------------------------------------------------------------ 1 URIBL_SBL 1739 6.66% 50.71% 85.04% 2 HTML_MESSAGE 1586 6.07% 46.25% 77.56% 3 URIBL_WS_SURBL 1447 5.54% 42.20% 70.76% 4 URIBL_JP_SURBL 1373 5.26% 40.04% 67.14% 5 URIBL_OB_SURBL 1364 5.22% 39.78% 66.70% 6 DCC_CHECK 1047 4.01% 30.53% 51.20% 7 MIME_HTML_ONLY 995 3.81% 29.02% 48.66% 8 BAYES_99 949 3.63% 27.68% 46.41% 9 PYZOR_CHECK 860 3.29% 25.08% 42.05% 10 DIGEST_MULTIPLE 836 3.20% 24.38% 40.88% 11 URIBL_SC_SURBL 635 2.43% 18.52% 31.05% 12 RAZOR2_CF_RANGE_51_100 612 2.34% 17.85% 29.93% 13 RAZOR2_CHECK 604 2.31% 17.61% 29.54% 14 HTML_WEB_BUGS 496 1.90% 14.46% 24.25% 15 HTML_90_100 431 1.65% 12.57% 21.08% 16 HTML_IMAGE_RATIO_02 426 1.63% 12.42% 20.83% 17 MSGID_SPAM_LETTERS 330 1.26% 9.62% 16.14% 18 HTML_LINK_IMAGE_BUG 308 1.18% 8.98% 15.06% 19 URIBL_AB_SURBL 292 1.12% 8.52% 14.28% 20 BAYES_50 278 1.06% 8.11% 13.59% ------------------------------------------------------------------------ Oh and this is out of the stuff that actually makes it to the queue... Which is normally like 8-15% of the overall total connections, so these %OFSPAM numbers are probably conservative, but I really don't feel like shutting down rbl's just to get a true number :) d

2 1

RE: quick poll on SURBL hit %
by Chris Santerre 05 Jan '05

05 Jan '05

>-----Original Message----- >From: Gary Funck [mailto:gary@intrepid.com] >Sent: Wednesday, January 05, 2005 12:30 PM >To: SURBL Discussion List (E-mail); Spamassassin-Talk (E-mail) >Subject: RE: quick poll on SURBL hit % > > > > >> -----Original Message----- >> From: Chris Santerre [mailto:csanterre@MerchantsOverseas.com] >> Sent: Wednesday, January 05, 2005 7:16 AM >> >> Just curious as to what average percent of spam people see SURBL >> hitting. In >> a non scientific manor, I average about 85% or greater hitting >> SURBL for all >> spam that doesn't get rejected by my MTA. I have a feeling if I >> clean up my >> results a bit, that number would be even higher. > > >> -----Original Message----- >> From: Chris Santerre [mailto:csanterre@MerchantsOverseas.com] >> Sent: Wednesday, January 05, 2005 7:16 AM >> >> Just curious as to what average percent of spam people see SURBL >> hitting. In >> a non scientific manor, I average about 85% or greater hitting >> SURBL for all >> spam that doesn't get rejected by my MTA. I have a feeling if I >> clean up my >> results a bit, that number would be even higher. > >Very anecdotal, but of the last 20 messages scored as spam, >only 1 of them >did not hit on any SURBL's. On a daily basis about 2 or 3 per >user, out >of an average of 200 to 300 non-spam messages delivered, were >diagnosed as >non-spam, and were not registered in the SURBL when >delievered, but when >manually checked later, their offending URL's had been registered in at >least one, and often several, SURBL's. SURBL's are definitely >workling. Nice. Ryans numbers look good as well. I think Jeff's magic threshold number was 88%? Our response times are getting really good. I've had numerous submissions that trigger on SURBL! We've got some ideas for that last 10-12% ;) --Chris

1 0

RE: [SURBL-Discuss] Thunderbird and SURBL?
by Tim A 05 Jan '05

05 Jan '05

> -----Original Message----- > From: Chris Santerre <csanterre(a)merchantsoverseas.com> > Date: Thu, 16 Dec 2004 17:07:29 -0500 > Subject: RE: [SURBL-Discuss] Thunderbird and SURBL? > To: "tim-surbl(a)kosmo.com" <tim-surbl(a)kosmo.com>, SURBL Discussion list > <discuss(a)lists.surbl.org> ...snip... > We do have a list on surbl.org. Granted it isn't very prominent. :) Perhaps > Jeff will add you? Just following up on this. Have we been added to the list? We've been using SURBL pretty well since the beginning of SURBL. Tim

1 0

RE: Flyer for MIT spam conference?
by Chris Santerre 05 Jan '05

05 Jan '05

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Tuesday, January 04, 2005 5:19 PM >To: SURBL Discuss >Cc: SpamAssassin Users >Subject: Flyer for MIT spam conference? > > >I hope folks going to the MIT spam conference will please >consider mentioning SURBLs at least informally. In case >it's useful, I've updated the flyer I gave out at CEAS: > > http://www.surbl.org/flyer.html > >Comments are welcomed. How about T-Shirts that read: -- SURBL -- All your domains are, belong to us. ;) --Chris

2 1

vote for whitelist
by Chris Santerre 04 Jan '05

04 Jan '05

I'm asking for a preventative whitelist for deadzoom. com Thoughts? Chris Santerre System Admin and SARE/SURBL Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

2 1

RE: [SURBL-Discuss] help checking domain please
by Chris Santerre 04 Jan '05

04 Jan '05

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Wednesday, December 29, 2004 6:19 PM >To: SURBL Discuss >Subject: Re: [SURBL-Discuss] help checking domain please > > >On Wednesday, December 29, 2004, 7:14:31 AM, Chris Santerre wrote: >> OK, I have a hunch it may be spam. It was submitted to SURBL >and it pretty >> much looks like spam, But hard to tell. Anyone help me out? > >> http://www.ijting.com/index.asp?partner=dora > >It appears to be a Korean web site. Does anyone know anyone who >can read Korean? I think Kim Jong Il can read korean. ;) --Chris

1 0

Rookie Question
by Kevin A. McGrail 03 Jan '05

03 Jan '05

OK. It's a silly question but I'd like to start submitting more of the SPAM I hand-filter for inclusion in the SURBL lists. For example, I'm being inundated with offers for free watches linking to http://*.nepel-MUNGED.com/ which redirects to http://www.online-replica-store-MUNGED.com/. What is the best process for me to take a known SPAM and get the ball rolling on something like this? Regards, KAM

7 21

DoS Question
by Kevin A. McGrail 01 Jan '05

01 Jan '05

> This isnt something to discuss on the SURBL list, but it looks like you > either have a dictionary attack going on. I'm sorry. I should clarify on list (though I do appreciate the offer of off-list support) All of these connections do not seem to proceed past the connection startup phase. I am very used to dictionary attacks having hosted sites and DNS that bring ire from Spammers (formerly www.spamassassin.org and currently just DNS, an SURBL public nameserver, RelayRegistry.org, anti-SPAM How-To's, etc). This looks like a VERY large distributed Denial of Service attack. The reason I posted here and I believe it is relevant because it might be against SURBL nameservers and I'm hoping to hear if others are seeing the same issue. Regards, KAM

3 3

DoS Question
by Kevin A. McGrail 01 Jan '05

01 Jan '05

Anyone else seeing massive sendmail connections seemingly for the sole purpose of a denial of service? This is less than one minute or two after a sendmail restart and we've been seeing this issue since app 6AM today. Regards, KAM 15991 ? S 0:00 sendmail: accepting connections 16001 ? S 0:00 sendmail: Queue runner@00:05:00 for /var/spool/clientmqueue 16003 ? S 0:00 sendmail: server localhost.localdomain [127.0.0.1] startup 16011 ? S 0:00 sendmail: Queue runner@02:00:00 for /var/spool/slow-mqueue 16012 ? SN 0:00 sendmail: ./j019qwZv004520 a.mx.bmkblurb.com.: user open 16015 ? S 0:00 sendmail: server dxbmiint3.emirates.com [194.170.246.36] startup 16016 ? S 0:00 sendmail: server [202.54.102.156] startup 16018 ? S 0:00 sendmail: server [211.104.187.50] startup 16019 ? S 0:00 sendmail: server [220.120.62.88] startup 16021 ? S 0:00 sendmail: server ll194-2-26-197-204-194.ll194-2.iam.net.ma [194.204.197.26] startup 16022 ? S 0:00 sendmail: server [84.43.33.20] startup 16023 ? S 0:00 sendmail: server 82-131-132-2.vnet.hu [82.131.132.2] startup 16024 ? S 0:00 sendmail: server 64-48-158-104-den-01.cvx.algx.net [64.48.158.104] startup 16025 ? S 0:00 sendmail: server 82-41-19-162.cable.ubr03.edin.blueyonder.co.uk [82.41.19.162] startup 16027 ? S 0:00 sendmail: server ip-cust10018.telefonica-ca.net [216.184.126.18] (may be forged) startup 16028 ? S 0:00 sendmail: server [211.114.176.195] startup 16029 ? S 0:00 sendmail: server [220.125.52.195] startup 16030 ? S 0:00 sendmail: server 210-20-54-62.rev.home.ne.jp [210.20.54.62] startup 16034 ? S 0:00 sendmail: server [4.27.171.43] startup 16035 ? S 0:00 sendmail: server 13Cust29.VR2.NYC4.broadband.uu.net [63.13.166.29] startup 16038 ? S 0:00 sendmail: server localhost.localdomain [127.0.0.1] startup 16040 ? S 0:00 sendmail: server pD9E2C8C3.dip.t-dialin.net [217.226.200.195] startup 16041 ? S 0:00 sendmail: server [222.185.250.34] startup 16042 ? S 0:00 sendmail: server host013.acernautic.com [216.108.233.13] startup 16043 ? S 0:00 sendmail: server [61.172.244.215] startup 16044 ? S 0:00 sendmail: server [220.123.210.157] startup 16045 ? S 0:00 sendmail: server pool-68-163-234-71.bos.east.verizon.net [68.163.234.71] startup 16046 ? S 0:00 sendmail: server host73-186.pool8256.interbusiness.it [82.56.186.73] startup 16047 ? S 0:00 sendmail: server [210.113.49.67] startup 16048 ? S 0:00 sendmail: server c68.112.186.179.fdl.wi.charter.com [68.112.186.179] startup 16049 ? S 0:00 sendmail: server 228.70-84-59.reverse.theplanet.com [70.84.59.228] (may be forged) startup 16060 ? S 0:00 sendmail: server localhost.localdomain [127.0.0.1] startup 16061 ? S 0:00 sendmail: server [218.208.242.167] startup 16062 ? S 0:00 sendmail: server bay102-f10.bay102.hotmail.com [64.4.61.20] startup 16063 ? S 0:00 sendmail: server [65.78.254.163] startup 16064 ? S 0:00 sendmail: server 24571.bhz.virtua.com.br [200.167.245.71] startup 16065 ? S 0:00 sendmail: server [211.179.138.196] startup 16066 ? S 0:00 sendmail: server [61.166.13.4] startup 16068 ? S 0:00 sendmail: server APuteaux-153-1-40-49.w82-124.abo.wanadoo.fr [82.124.132.49] startup 16069 ? S 0:00 sendmail: server [218.233.17.169] startup 16070 ? S 0:00 sendmail: server c-24-13-203-45.client.comcast.net [24.13.203.45] startup 16071 ? S 0:00 sendmail: server bounces.ibumblebee4.com [206.71.52.13] startup 16072 ? S 0:00 sendmail: server [218.235.101.219] startup 16074 ? S 0:00 sendmail: server 181.red-213-37-181.user.auna.net [213.37.181.181] (may be forged) startup 16077 ? S 0:00 sendmail: server hermes.apache.org [209.237.227.199] startup 16078 ? S 0:00 sendmail: server dsl-201-128-126-70.prod-infinitum.com.mx [201.128.126.70] (may be forged) startup 16079 ? S 0:00 sendmail: server n1a.bulk.scd.yahoo.com [66.94.237.35] startup 16080 ? S 0:00 sendmail: server [211.185.22.81] startup 16081 ? S 0:00 sendmail: server lamx36.havagreatday.com [66.63.182.36] startup 16083 ? S 0:00 sendmail: server [211.115.116.19] startup 16084 ? S 0:00 sendmail: server [218.104.80.23] startup 16085 ? S 0:00 sendmail: server n22a.bulk.scd.yahoo.com [66.94.237.51] startup 16086 ? S 0:00 sendmail: server ns2.cube-technos.co.jp [60.32.0.83] startup 16091 ? S 0:00 sendmail: server mxsmfpool23.ebay.com [66.135.209.220] startup 16093 ? S 0:00 sendmail: server c906d0d1.virtua.com.br [201.6.208.209] startup 16100 ? S 0:00 sendmail: server [198.172.80.180] startup 16102 ? S 0:00 sendmail: server customer-reverse-entry.69.59.181.180 [69.59.181.180] (may be forged) startup 16104 ? S 0:00 sendmail: server 24571.bhz.virtua.com.br [200.167.245.71] startup 16105 ? S 0:00 sendmail: server mail6.surgant.com [64.0.201.121] startup 16106 ? S 0:00 sendmail: server [198.172.80.74] startup 16107 ? S 0:00 sendmail: server c-24-13-203-45.client.comcast.net [24.13.203.45] startup 16108 ? S 0:00 sendmail: server bay1-f26.bay1.hotmail.com [65.54.245.26] startup 16109 ? S 0:00 sendmail: server [193.129.96.138] startup 16110 ? S 0:00 sendmail: server c24.183.51.76.mad.wi.charter.com [24.183.51.76] startup 16111 ? S 0:00 sendmail: server 8.7.152.3.westgrep.info [8.7.152.3] startup 16112 ? S 0:00 sendmail: server [61.3.224.82] startup 16113 ? S 0:00 sendmail: server usen-221x253x207x69.ap-US01.usen.ad.jp [221.253.207.69] startup 16114 ? S 0:00 sendmail: server [61.177.95.216] startup 16115 ? S 0:00 sendmail: server tethys.herbagebunk.com [208.250.5.245] startup 16116 ? S 0:00 sendmail: server [216.63.195.133] startup 16117 ? S 0:00 sendmail: server cpe-069-134-008-168.carolina.rr.com [69.134.8.168] startup 16118 ? S 0:00 sendmail: server VA1-1B-u-0483.mc.onolab.com [62.42.5.228] startup 16119 ? S 0:00 sendmail: server [211.230.32.103] startup 16120 ? S 0:00 sendmail: server [218.80.102.233] startup 16122 ? S 0:00 sendmail: server adsl-67-39-207-175.dsl.bcvloh.ameritech.net [67.39.207.175] startup 16123 ? S 0:00 sendmail: server [218.14.146.51] startup 16124 ? S 0:00 sendmail: server [220.75.182.138] startup 16129 ? S 0:00 sendmail: server [220.75.220.84] startup 16132 ? S 0:00 sendmail: server [219.136.83.187] startup 16133 ? S 0:00 sendmail: server n5a.bulk.scd.yahoo.com [66.94.237.39] startup 16135 ? S 0:00 sendmail: server pool-68-162-185-58.pitt.east.verizon.net [68.162.185.58] startup 16136 ? S 0:00 sendmail: server h8024847078.dsl.speedlinq.nl [80.248.44.78] (may be forged) startup 16137 ? S 0:00 sendmail: server [221.15.5.43] startup 16141 ? S 0:00 sendmail: server [220.119.63.191] startup 16142 ? S 0:00 sendmail: server outmail-01.effectivesendinga.com [209.216.105.19] startup 16143 ? S 0:00 sendmail: server pcp07278419pcs.alico01.fl.comcast.net [69.139.62.88] startup 16144 ? S 0:00 sendmail: server [201.255.46.109] startup 16145 ? S 0:00 sendmail: server [198.172.80.157] startup 16146 ? S 0:00 sendmail: server [218.54.136.85] startup 16147 ? S 0:00 sendmail: server [221.8.150.220] startup 16149 ? S 0:00 sendmail: server [82.230.221.86] startup 16152 ? S 0:00 sendmail: server [219.240.209.90] startup 16153 ? S 0:00 sendmail: server c-24-1-43-131.client.comcast.net [24.1.43.131] startup 16155 ? S 0:00 sendmail: server e82-103-142-136s.easyspeedy.com [82.103.142.135] (may be forged) startup 16156 ? S 0:00 sendmail: server ACB6EDEF.ipt.aol.com [172.182.237.239] startup 16157 ? S 0:00 sendmail: server roc-24-169-121-161.rochester.rr.com [24.169.121.161] startup 16158 ? S 0:00 sendmail: server [218.80.30.226] startup 16160 ? S 0:00 sendmail: server [61.61.177.163] startup 16161 ? S 0:00 sendmail: server mail8.ghhijk.com [207.170.98.40] startup 16162 ? S 0:00 sendmail: server [70.214.144.253] startup 16163 ? S 0:00 sendmail: server AReims-108-1-2-130.w81-53.abo.wanadoo.fr [81.53.229.130] startup 16164 ? S 0:00 sendmail: server mta1.true.com [69.56.167.147] startup 16165 ? S 0:00 sendmail: server out014pub.verizon.net [206.46.170.46] startup 16166 ? S 0:00 sendmail: server dc2.dig-net.com [64.95.116.52] startup 16168 ? S 0:00 sendmail: server sccrmhc12.comcast.net [204.127.202.56] startup 16170 ? S 0:00 sendmail: server mail5.fundowntheroad.com [207.170.100.101] startup 16173 ? S 0:00 sendmail: server n12a.bulk.scd.yahoo.com [66.94.237.20] startup 16174 ? S 0:00 sendmail: server [217.23.183.22] startup 16175 ? S 0:00 sendmail: server AAmiens-151-1-34-3.w83-192.abo.wanadoo.fr [83.192.180.3] startup 16176 ? S 0:00 sendmail: server ppp-62-235-124-50.tiscali.be [62.235.124.50] startup 16177 ? S 0:00 sendmail: server [218.25.114.128] startup 16181 ? S 0:00 sendmail: server 22315.bsb.virtua.com.br [200.167.223.15] startup 16187 ? S 0:00 sendmail: server res-66-169-17-252.spa.sc.charter.com [66.169.17.252] startup 16188 ? S 0:00 sendmail: server [61.178.209.21] startup 16193 ? S 0:00 sendmail: server notfound [83.246.112.45] (may be forged) startup 16194 ? S 0:00 sendmail: server FLH1Adt069.tky.mesh.ad.jp [60.236.81.69] startup 16195 ? S 0:00 sendmail: server outmail-01.beerbellybargaina.com [206.71.58.12] startup 16196 ? S 0:00 sendmail: server s5.blackjackpresents.com [65.123.250.108] (may be forged) startup 16197 ? S 0:00 sendmail: server 198.red-82-158-48.user.auna.net [82.158.48.198] (may be forged) startup 16198 ? S 0:00 sendmail: server c90644d4.virtua.com.br [201.6.68.212] startup 16199 ? S 0:00 sendmail: server 217172.bsb.virtua.com.br [200.167.217.172] startup 16200 ? S 0:00 sendmail: server [211.97.156.50] startup 16201 ? S 0:00 sendmail: server cablelink5-82-77-151-202.rdstm.ro [82.77.151.202] (may be forged) startup 16202 ? S 0:00 sendmail: server [200.167.58.83] startup 16204 ? S 0:00 sendmail: server adsl-65-42-242-7.dsl.lgtpmi.ameritech.net [65.42.242.7] startup 16205 ? S 0:00 sendmail: server cm05.edoca.com [66.63.170.45] (may be forged) startup 16208 ? S 0:00 sendmail: server [203.90.160.30] startup 16209 ? S 0:00 sendmail: server cablelink5-82-77-151-202.rdstm.ro [82.77.151.202] (may be forged) startup 16216 ? S 0:00 sendmail: server adsl-69-109-31-184.dsl.renocs.nvbell.net [69.109.31.184] startup 16217 ? S 0:00 sendmail: server user-0cej18t.cable.mindspring.com [24.233.133.29] startup 16221 ? S 0:00 sendmail: server lamx33.havagreatday.com [66.63.182.33] startup 16223 ? S 0:00 sendmail: server [218.52.79.116] startup 16224 ? S 0:00 sendmail: server customer-reverse-entry.69.59.181.180 [69.59.181.180] (may be forged) startup 16225 ? S 0:00 sendmail: server [218.80.102.233] startup 16226 ? S 0:00 sendmail: server outmail-01.centralreliability.com [209.216.105.11] startup 16227 ? S 0:00 sendmail: server modemcable020.183-131-66.mc.videotron.ca [66.131.183.20] startup 16228 ? S 0:00 sendmail: server [219.252.195.7] startup 16232 ? S 0:00 sendmail: server 200-161-19-79.dsl.telesp.net.br [200.161.19.79] startup 16233 ? S 0:00 sendmail: server modemcable214.51-200-24.mc.videotron.ca [24.200.51.214] startup 16234 ? S 0:00 sendmail: server [61.8.211.107] startup 16236 ? S 0:00 sendmail: server hnllhi1-ar8-4-11-077-069.dsl-verizon.net [4.11.77.69] startup 16238 ? S 0:00 sendmail: server n17a.bulk.scd.yahoo.com [66.94.237.46] startup 16239 ? S 0:00 sendmail: server anetrelay2f.authorize.net [64.94.119.18] startup 16241 ? S 0:00 sendmail: server gailleton-1-82-67-6-76.fbx.proxad.net [82.67.6.76] startup 16242 ? S 0:00 sendmail: server ZQ206213.ppp.dion.ne.jp [222.13.206.213] startup 16244 ? S 0:00 sendmail: server adsl-215-218-32.aep.bellsouth.net [68.215.218.32] startup 16245 ? S 0:00 sendmail: server [211.207.196.53] startup 16246 ? S 0:00 sendmail: server c-24-22-47-253.client.comcast.net [24.22.47.253] startup 16247 ? S 0:00 sendmail: server 82-46-253-39.cable.ubr03.smal.blueyonder.co.uk [82.46.253.39] startup 16248 ? S 0:00 sendmail: server out008pub.verizon.net [206.46.170.108] startup 16249 ? S 0:00 sendmail: server host122-48.pool80181.interbusiness.it [80.181.48.122] startup 16250 ? S 0:00 sendmail: server [61.52.37.201] startup 16251 ? S 0:00 sendmail: server cindyloo.teamworksmedia.com [198.63.216.71] startup 16252 ? S 0:00 sendmail: server 206-81-80-237.spokane.acetechusa.com [206.81.80.237] (may be forged) startup 16253 ? S 0:00 sendmail: server ppp-61.91.78.246.revip.asianet.co.th [61.91.78.246] startup 16254 ? S 0:00 sendmail: server [221.233.211.66] startup 16255 ? S 0:00 sendmail: server bb-195-172-49-251.ukonline.co.uk [195.172.49.251] startup 16256 ? S 0:00 sendmail: server outmail-01.centralreliabilityc.com [209.216.105.14] startup 16257 ? S 0:00 sendmail: server 68.domain.tld [207.157.69.68] (may be forged) startup 16258 ? S 0:00 sendmail: server [211.227.149.108] startup 16259 ? S 0:00 sendmail: server 129.red-213-37-90.user.auna.net [213.37.90.129] (may be forged) startup 16260 ? S 0:00 sendmail: server YahooBB218112124022.bbtec.net [218.112.124.22] startup 16261 ? S 0:00 sendmail: server net-152-111-125-52.mweb.co.za [152.111.125.52] (may be forged) startup 16262 ? S 0:00 sendmail: server c-134-80-77.f.dial.de.ignite.net [62.134.80.77] startup 16266 ? S 0:00 sendmail: server [200.103.60.144] startup 16275 ? S 0:00 sendmail: server [61.255.23.78] startup 16277 ? S 0:00 sendmail: server 1.tfmbuysc.com [63.214.155.18] (may be forged) startup 16278 ? S 0:00 sendmail: server 17923191.rjo.virtua.com.br [200.179.231.91] startup 16279 ? S 0:00 sendmail: server 200141086157.user.veloxzone.com.br [200.141.86.157] startup 16294 ? S 0:00 sendmail: ./j01GF1xj016294 [127.0.0.1]: client greeting 16296 ? S 0:00 sendmail: server localhost.localdomain [127.0.0.1] startup 16297 ? S 0:00 sendmail: server user-0cet0mq.cable.mindspring.com [24.238.130.218] startup 16298 ? S 0:00 sendmail: server mail6.ghhijk.com [207.170.98.14] startup 16299 ? S 0:00 sendmail: server mail6.fundowntheroad.com [207.170.100.102] startup 16300 ? S 0:00 sendmail: server mail2.fundowntheroad.com [207.170.100.100] startup 16301 ? S 0:00 sendmail: server [210.204.11.200] startup 16302 ? S 0:00 sendmail: server mail1.fundowntheroad.com [207.170.100.97] startup 16303 ? S 0:00 sendmail: server mail3.fundowntheroad.com [207.170.100.98] startup 16304 ? S 0:00 sendmail: server mail6.fundowntheroad.com [207.170.100.102] startup 16305 ? S 0:00 sendmail: server mail4.villner.com [207.182.156.21] startup 16306 ? S 0:00 sendmail: server mail14.villner.com [207.182.156.31] startup 16307 ? S 0:00 sendmail: server mail17.villner.com [207.182.156.34] startup 16308 ? S 0:00 sendmail: server imr-m03.mx.aol.com [64.12.138.201] startup 16309 ? S 0:00 sendmail: server d4.dafoggle.com [66.154.112.244] startup 16310 ? S 0:00 sendmail: server e6.erfooble.com [66.154.112.86] startup 16311 ? S 0:00 sendmail: server [60.176.251.236] startup 16312 ? SN 0:00 sendmail: ./j01EAF5Z009256 vc.ghul-group.com.: user open 16313 ? S 0:00 sendmail: server [211.158.54.142] startup 16314 ? S 0:00 sendmail: ./j01G90ZZ015842 [127.0.0.1]: client greeting 16315 ? S 0:00 sendmail: server localhost.localdomain [127.0.0.1] startup 16316 ? S 0:00 sendmail: server dsl093-044-153.sac1.dsl.speakeasy.net [66.93.44.153] startup 16317 ? S 0:00 sendmail: server imr-m03.mx.aol.com [64.12.138.201] startup 16318 ? S 0:00 sendmail: server imr-d06.mx.aol.com [205.188.159.7] startup 16323 ? S 0:00 sendmail: server imr-d05.mx.aol.com [205.188.156.66] startup 16324 ? S 0:00 sendmail: server ppp93-67.dsl-pun.eth.net [61.11.93.67] (may be forged) startup 16325 ? S 0:00 sendmail: server [210.204.11.200] startup 16326 ? S 0:00 sendmail: server [219.251.146.109] startup 16327 ? S 0:00 sendmail: server [220.86.153.216] startup 16328 ? S 0:00 sendmail: server [222.79.166.130] startup 16330 ? S 0:00 sendmail: server [65.169.182.69] startup 16332 ? S 0:00 sendmail: server 200-187-213-184.brt.dialuol.com.br [200.187.213.184] startup 16333 ? S 0:00 sendmail: server [200.195.48.163] startup 16334 ? S 0:00 sendmail: server [200.167.58.83] startup 16335 ? S 0:00 sendmail: server [219.248.223.170] startup 16336 ? S 0:00 sendmail: server [211.116.25.117] startup 16337 ? S 0:00 sendmail: server [200.166.30.2] startup 16338 ? S 0:00 sendmail: server [60.222.36.251] startup 16339 ? S 0:00 sendmail: server dhcp024-209-077-079.woh.rr.com [24.209.77.79] startup 16340 ? S 0:00 sendmail: server lamx33.havagreatday.com [66.63.182.33] startup 16341 ? S 0:00 sendmail: server [221.146.163.52] startup 16342 ? S 0:00 sendmail: server pcp01451742pcs.chmbrs01.pa.comcast.net [68.83.40.197] startup 16343 ? S 0:00 sendmail: server adsl-68-255-77-60.dsl.lgtpmi.ameritech.net [68.255.77.60] startup 16344 ? S 0:00 sendmail: server d172.dhcp212-198-132.noos.fr [212.198.132.172] startup 16345 ? S 0:00 sendmail: server dup-148-221-127-252.prodigy.net.mx [148.221.127.252] startup 16346 ? S 0:00 sendmail: server 201-1-168-214.dsl.telesp.net.br [201.1.168.214] (may be forged) startup 16347 ? S 0:00 sendmail: server meaningful.inboxrebates3.com [67.134.43.8] startup 16348 ? S 0:00 sendmail: server 200-98-109-253.tlf.dialuol.com.br [200.98.109.253] startup 16350 ? S 0:00 sendmail: startup with 218.198.33.24 16355 ? S 0:00 sendmail: server pcp07278419pcs.alico01.fl.comcast.net [69.139.62.88] startup 16357 ? S 0:00 sendmail: server 200-168-11-193.dial-up.telesp.net.br [200.168.11.193] (may be forged) startup

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss