On Friday, May 28, 2004, 3:48:15 AM, Rikhardur EGILSSON wrote:
> From: jdow [mailto:jdow@earthlink.net]
See: http://article.gmane.org/gmane.mail.spam.spamassassin.general/50187
>> If it hurts when you put your finger in the pencil sharpener and turn the
>> crank don't do it.
>> Simply cancel all redirects as spam. If someone legitimate is not courteous
>> enough to send it "clear" then "scroom."
> Good point, but how do I do that ?
> If I understand the …
[View More]SURBL documentation corectly
> "spamcop_uri_resolve_open_redirects" will only work on those domains
> explicitly named in "open_redirect_list_spamcop_uri" not every spammer
> throwaway domain..
We could probably put together a small paper on the subject
of redirection sites. First thing to note is that there are
different types. Some like the yahoo redirection site show
the destination URI clearly contained within the original URI.
Others like tinyurl or the spammer redirection site you found
encode the destination site so that it's not plainly visible in
the original URI. The latter have been called "opaque" and the
former "open" redirections. Probably there are other names
also, but you get the idea.
urirhsbl in SA 3.0 will check all the domains visible in the
URI against the SURBL it's called on (perhaps up to some limited
number of URIs), including checking the redirection sites
themselves. If the "redirect resolution" feature is enabled,
SpamCopURI in SA 2.63 will attempt to resolve the Location header
using the redirection server, but I'm not sure whether it can do
so on an opaque redirection or not.
All of the previous answers also apply. Reporting spams to
SpamCop which have any visible black hat redirection sites will
get them into sc.surbl.org unless we specifically whitelist them,
which we would not do for purely spammer redirectors such as
the one you found. In that way, even an opaque redirection site
will get listed if it's a bad guy redirection site, as opposed
to a mostly legitimate one like Yahoo's.
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
[View Less]
Hi, Since SURBL relies extensively on SA's get_uri_list/uri_to_domain I
thought it might be appropiate to discuss possible FP's/FN's on this
list so as to alert other members to bugs/spammer tricks etc and also be
able to provide reduced testcases/fixes to SA developers upstream.
One example I've recently filed in SA's bugzilla is
http://bugzilla.spamassassin.org/show_bug.cgi?id=3427
Regards, Yusuf
Hi Eric,
That is correct, if this is the message you mean?
perl Makefile.PL
# SAPATH /usr/lib/perl5/site_perl/5.8.0
# installsitelib /usr/lib/perl5/site_perl/5.8.0
# INSTALLDIRS site
Warning: prerequisite URI 1.28 not found. We have 1.21.
Writing Makefile for Mail::SpamAssassin::SpamCopURI
Which URI package do i need to download through CPAN in this case?
Thanks in advance
/ Martin
-----Original Message-----
From: Eric Kolve
To: SURBL Discussion list
Sent: 5/27/2004 6:34 PM
Subject: Re: …
[View More][SURBL-Discuss] Problems installing SPAMCOP_URI - Make test e
rror
You need the URI package from CPAN. You should have received
a warning when you attempted to install (if not let me know).
--eric
On Thu, May 27, 2004 at 02:52:28PM +0200, Martin Lyberg wrote:
> Hi!
>
> I solved the problem by this thread:
>
> http://lists.surbl.org/pipermail/discuss/2004-May/000522.html
>
> But now i can't get through 'make test'. This gives me the following:
>
> make test
>
> ---snip---
>
> Failed 9/9 tests, 0.00% okay
> t/whitelist........Can't locate URI/QueryParam.pm in @INC (@INC
contains:
> /root/Mail-SpamAssassin-SpamCopURI-0.16/blib/lib
> /root/Mail-SpamAssassin-SpamCopURI-0.16/blib/arch
> /usr/lib/perl5/5.8.0/i386-linux-thread-multi
> /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0
> /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
> /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
> /usr/lib/perl5/site_perl/5.8.0
> /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
> /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl
> /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
> /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
> /usr/lib/perl5/vendor_perl/5.8.0
> /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
> /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl
> /usr/lib/perl5/5.8.0/i386-linux-thread-multi
> /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 .
> /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0
> /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
> /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl
> /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
> /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl
> /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 .)
at
>
/root/Mail-SpamAssassin-SpamCopURI-0.16/blib/lib/Mail/SpamAssassin/SpamC
opUR
> I.pm line 5.
> BEGIN failed--compilation aborted at
>
/root/Mail-SpamAssassin-SpamCopURI-0.16/blib/lib/Mail/SpamAssassin/SpamC
opUR
> I.pm line 5.
> Compilation failed in require at t/whitelist.t line 6.
> BEGIN failed--compilation aborted at t/whitelist.t line 6.
> # Looks like your test died before it could output anything.
> t/whitelist........dubious
>
> Test returned status 2 (wstat 512, 0x200)
> DIED. FAILED tests 1-6
> Failed 6/6 tests, 0.00% okay
> Failed Test Stat Wstat Total Fail Failed List of Failed
>
------------------------------------------------------------------------
----
> ---
> t/blacklist.t 2 512 4 4 100.00% 1-4
> t/dnsrbl.t 2 512 6 6 100.00% 1-6
> t/extract_urls.t 2 512 15 15 100.00% 1-15
> t/mailto.t 2 512 1 1 100.00% 1
> t/open_redirect.t 2 512 5 5 100.00% 1-5
> t/spamcopuri.t 2 512 9 9 100.00% 1-9
> t/whitelist.t 2 512 6 6 100.00% 1-6
> Failed 7/7 test scripts, 0.00% okay. 46/46 subtests failed, 0.00%
okay.
> make: *** [test_dynamic] Error 2
>
> Any solution to this problem? Just before i did upgrade Net::DNS
through
> CPAN.
>
> Thank you.
>
> / Martin
>
>
>
> : -----Ursprungligt meddelande-----
> : Från: Eric Kolve [mailto:ekolve@comcast.net]
> : Skickat: den 27 maj 2004 14:11
> : Till: SURBL Discussion list
> : Ämne: Re: [SURBL-Discuss] Problems installing SPAMCOP_URI
> :
> :
> : On Thu, May 27, 2004 at 01:44:02PM +0200, Martin Lyberg wrote:
> : > : Hi
> : > :
> : > : I've been reading alot about SURBL in SA-mailinglist, now
> : > : i've decided to give it a try. But im having trouble
> : > : installing SpamcopUri.
> : > :
> : > : I have the following system: RH9, Postfix, SA 2.63
> : > :
> : > : I get the following:
> : > :
> : > : Perl Makefile.pl
> : > :
> : > : Can't locate Mail/SpamAssassin.pm in @INC (@INC contains:
> : > : /usr/lib/perl5/5.8.0/i386-linux-thread-multi
> : > : /usr/lib/perl5/5.8.0
> : > : /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
> : > : /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl
> : > : /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
> : > : /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl
> : > : /usr/lib/perl5/5.8.0/i386-linux-thread-multi
> : > : /usr/lib/perl5/5.8.0 .) at Makefile.PL line 3. BEGIN
> : > : failed--compilation aborted at Makefile.PL line 3.
> : > :
> : > : What is wrong here?
> :
> : It looks like 'Perl' (was that really what was executed)
> : couldn't find Mail::SpamAssassin. Do you know where it's
> : installed? This appears to be an issue with the @INC.
> :
> :
> : --eric
> :
> :
> : >
> : > Does anyone know a solution to this problem? Is there any easy
> : > solution?
> : >
> : > Thanks in advance
> : >
> : > / Martin
> : > _______________________________________________
> : > Discuss mailing list
> : > Discuss(a)lists.surbl.org
> : > http://lists.surbl.org/mailman/listinfo/discuss
> : _______________________________________________
> : Discuss mailing list
> : Discuss(a)lists.surbl.org
> : http://lists.surbl.org/mailman/listinfo/discuss
> :
>
> _______________________________________________
> Discuss mailing list
> Discuss(a)lists.surbl.org
> http://lists.surbl.org/mailman/listinfo/discuss
_______________________________________________
Discuss mailing list
Discuss(a)lists.surbl.org
http://lists.surbl.org/mailman/listinfo/discuss
[View Less]
Hi!
I solved the problem by this thread:
http://lists.surbl.org/pipermail/discuss/2004-May/000522.html
But now i can't get through 'make test'. This gives me the following:
make test
---snip---
Failed 9/9 tests, 0.00% okay
t/whitelist........Can't locate URI/QueryParam.pm in @INC (@INC contains:
/root/Mail-SpamAssassin-SpamCopURI-0.16/blib/lib
/root/Mail-SpamAssassin-SpamCopURI-0.16/blib/arch
/usr/lib/perl5/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/…
[View More]lib/perl5/5.8.0
/usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.0
/usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl
/usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.0
/usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl
/usr/lib/perl5/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 .
/usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0
/usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl
/usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl
/usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 .) at
/root/Mail-SpamAssassin-SpamCopURI-0.16/blib/lib/Mail/SpamAssassin/SpamCopUR
I.pm line 5.
BEGIN failed--compilation aborted at
/root/Mail-SpamAssassin-SpamCopURI-0.16/blib/lib/Mail/SpamAssassin/SpamCopUR
I.pm line 5.
Compilation failed in require at t/whitelist.t line 6.
BEGIN failed--compilation aborted at t/whitelist.t line 6.
# Looks like your test died before it could output anything.
t/whitelist........dubious
Test returned status 2 (wstat 512, 0x200)
DIED. FAILED tests 1-6
Failed 6/6 tests, 0.00% okay
Failed Test Stat Wstat Total Fail Failed List of Failed
----------------------------------------------------------------------------
---
t/blacklist.t 2 512 4 4 100.00% 1-4
t/dnsrbl.t 2 512 6 6 100.00% 1-6
t/extract_urls.t 2 512 15 15 100.00% 1-15
t/mailto.t 2 512 1 1 100.00% 1
t/open_redirect.t 2 512 5 5 100.00% 1-5
t/spamcopuri.t 2 512 9 9 100.00% 1-9
t/whitelist.t 2 512 6 6 100.00% 1-6
Failed 7/7 test scripts, 0.00% okay. 46/46 subtests failed, 0.00% okay.
make: *** [test_dynamic] Error 2
Any solution to this problem? Just before i did upgrade Net::DNS through
CPAN.
Thank you.
/ Martin
: -----Ursprungligt meddelande-----
: Från: Eric Kolve [mailto:ekolve@comcast.net]
: Skickat: den 27 maj 2004 14:11
: Till: SURBL Discussion list
: Ämne: Re: [SURBL-Discuss] Problems installing SPAMCOP_URI
:
:
: On Thu, May 27, 2004 at 01:44:02PM +0200, Martin Lyberg wrote:
: > : Hi
: > :
: > : I've been reading alot about SURBL in SA-mailinglist, now
: > : i've decided to give it a try. But im having trouble
: > : installing SpamcopUri.
: > :
: > : I have the following system: RH9, Postfix, SA 2.63
: > :
: > : I get the following:
: > :
: > : Perl Makefile.pl
: > :
: > : Can't locate Mail/SpamAssassin.pm in @INC (@INC contains:
: > : /usr/lib/perl5/5.8.0/i386-linux-thread-multi
: > : /usr/lib/perl5/5.8.0
: > : /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
: > : /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl
: > : /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
: > : /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl
: > : /usr/lib/perl5/5.8.0/i386-linux-thread-multi
: > : /usr/lib/perl5/5.8.0 .) at Makefile.PL line 3. BEGIN
: > : failed--compilation aborted at Makefile.PL line 3.
: > :
: > : What is wrong here?
:
: It looks like 'Perl' (was that really what was executed)
: couldn't find Mail::SpamAssassin. Do you know where it's
: installed? This appears to be an issue with the @INC.
:
:
: --eric
:
:
: >
: > Does anyone know a solution to this problem? Is there any easy
: > solution?
: >
: > Thanks in advance
: >
: > / Martin
: > _______________________________________________
: > Discuss mailing list
: > Discuss(a)lists.surbl.org
: > http://lists.surbl.org/mailman/listinfo/discuss
: _______________________________________________
: Discuss mailing list
: Discuss(a)lists.surbl.org
: http://lists.surbl.org/mailman/listinfo/discuss
:
[View Less]
Hi Eric,
: > :
: > : Can't locate Mail/SpamAssassin.pm in @INC (@INC contains:
: > : /usr/lib/perl5/5.8.0/i386-linux-thread-multi
: > : /usr/lib/perl5/5.8.0
: > : /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
: > : /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl
: > : /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
: > : /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl
: > : /usr/lib/perl5/5.8.0/i386-linux-thread-multi
: &…
[View More]gt; : /usr/lib/perl5/5.8.0 .) at Makefile.PL line 3. BEGIN
: > : failed--compilation aborted at Makefile.PL line 3.
: > :
: > : What is wrong here?
:
: It looks like 'Perl' (was that really what was executed)
: couldn't find Mail::SpamAssassin. Do you know where it's
: installed? This appears to be an issue with the @INC.
It's located here:
/usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin.pm
Seems like there's an issue with the Perlversion. Since im kinda new to
linux and don't want to mess up the installation, i wonder if there's an
easy solution to this without reinstalling either SA or Perl.
Thank you!
/ Martin
[View Less]
: Hi
:
: I've been reading alot about SURBL in SA-mailinglist, now
: i've decided to give it a try. But im having trouble
: installing SpamcopUri.
:
: I have the following system: RH9, Postfix, SA 2.63
:
: I get the following:
:
: Perl Makefile.pl
:
: Can't locate Mail/SpamAssassin.pm in @INC (@INC contains:
: /usr/lib/perl5/5.8.0/i386-linux-thread-multi
: /usr/lib/perl5/5.8.0
: /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
: /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/…
[View More]site_perl
: /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
: /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl
: /usr/lib/perl5/5.8.0/i386-linux-thread-multi
: /usr/lib/perl5/5.8.0 .) at Makefile.PL line 3. BEGIN
: failed--compilation aborted at Makefile.PL line 3.
:
: What is wrong here?
Does anyone know a solution to this problem? Is there any easy solution?
Thanks in advance
/ Martin
[View Less]
marketwatch.com
Yeah I'm not sure people are even checking these before reporting to me. But
this is used by a LOT of financial spam. Legit site.
Chris Santerre
System Admin and SARE Ninja
http://www.rulesemporium.com
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
Charles Darwin
Just released SpamCopURI 0.17. This is basically a bugfix release.
Upgrade if you see something you need:
0.17 Mon May 24 18:23:55 PDT 2004
- added code to handle hex encoded and base 10 encoded
IP addresses
- added backslash handling in urls (http:/\www.google.com)
- handling case when host of a URL is a '.'
- calling env_proxy on LWP::UserAgent to support proxied
users (thanks to bluebanana )
http://sourceforge.net/projects/spamcopuri/
--eric
20m.com is a web hosting site. However I believe they host spammers without
regard. I could be wrong. We need to decide wether they get whitelisted or
not. There are numerous legit sites hosted by them....unfortunetly.
Even going to their site produces a popup page.
Chris Santerre
System Admin and SARE Ninja
http://www.rulesemporium.com
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
Charles Darwin
Hi
I've been reading alot about SURBL in SA-mailinglist, now i've decided to
give it a try. But im having trouble installing SpamcopUri.
I have the following system: RH9, Postfix, SA 2.63
I get the following:
Perl Makefile.pl
Can't locate Mail/SpamAssassin.pm in @INC (@INC contains:
/usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0
/usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl
/usr/lib/perl5/vendor_perl/5.8.0/…
[View More]i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl
/usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 .) at
Makefile.PL line 3.
BEGIN failed--compilation aborted at Makefile.PL line 3.
What is wrong here?
Thanks in advance
/ Martin
[View Less]
Hi, updated a bunch of my perl modules - DNS, URI...
The initial perl makefile.pl worked well, but then I got this when doing
a make test:
Any help for a not so good perl person???
Thanks,
Dan
[root@MAPCI-MAILER-02 Mail-SpamAssassin-SpamCopURI-0.16]# make
cp lib/Mail/SpamAssassin/Conf.pm blib/lib/Mail/SpamAssassin/Conf.pm
cp lib/Mail/SpamAssassin/SpamCopURI.pm
blib/lib/Mail/SpamAssassin/SpamCopURI.pm
cp lib/Mail/SpamAssassin/PerMsgStatus.pm
blib/lib/Mail/SpamAssassin/PerMsgStatus.pm
…
[View More]Manifying blib/man3/Mail::SpamAssassin::Conf.3pm
Manifying blib/man3/Mail::SpamAssassin::SpamCopURI.3pm
Manifying blib/man3/Mail::SpamAssassin::PerMsgStatus.3pm
[root@MAPCI-MAILER-02 Mail-SpamAssassin-SpamCopURI-0.16]# make test
PERL_DL_NONLAZY=1 /usr/bin/perl -Iblib/arch -Iblib/lib
-I/usr/lib/perl5/5.6.1/i386-linux -I/usr/lib/perl5/5.6.1 -e 'use
Test::Harness qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t
t/blacklist.........Can't locate Test/More.pm in @INC (@INC contains:
blib/arch blib/lib /usr/lib/perl5/5.6.1/i386-linux
/usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1/i386-linux
/usr/lib/perl5/5.6.1 /usr/lib/perl5/5.6.1/i386-linux
/usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1
/usr/lib/perl5/site_perl/5.6.1/i386-linux
/usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1
/usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1
/usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux
/usr/lib/perl5/vendor_perl/5.6.1/i386-linux
/usr/lib/perl5/vendor_perl/5.6.1
/usr/lib/perl5/vendor_perl/5.6.1/i386-linux
/usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl .
/usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1
/usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1
/usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux
/usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl .) at
t/blacklist.t line 3.
BEGIN failed--compilation aborted at t/blacklist.t line 3.
t/blacklist.........dubious
Test returned status 2 (wstat 512, 0x200)
t/dnsrbl............Can't locate Test/More.pm in @INC (@INC contains:
blib/arch blib/lib /usr/lib/perl5/5.6.1/i386-linux
/usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1/i386-linux
/usr/lib/perl5/5.6.1 /usr/lib/perl5/5.6.1/i386-linux
/usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1
/usr/lib/perl5/site_perl/5.6.1/i386-linux
/usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1
/usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1
/usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux
/usr/lib/perl5/vendor_perl/5.6.1/i386-linux
/usr/lib/perl5/vendor_perl/5.6.1
/usr/lib/perl5/vendor_perl/5.6.1/i386-linux
/usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl .
/usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1
/usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1
/usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux
/usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl .) at
t/dnsrbl.t line 3.
BEGIN failed--compilation aborted at t/dnsrbl.t line 3.
t/dnsrbl............dubious
[View Less]
Hi,
Might already be known, but since I haven't seen it mentioned, here's
another redirector used in spam:
urllog.com
Actual example of spam using it available if needed.
Patrik
At 16:35 2004-05-22 +0200, Raymond Dijkxhoorn wrote:
> > Might already be known, but since I haven't seen it mentioned, here's
> > another redirector used in spam:
> > urllog.com
> >
> > Actual example of spam using it available if needed.
>
>Please provide all info, or post it on the list. Then we can contact the
>guys running the service and see if we can get them SURBL'ed.
OK, wasn't sure submitting the actual example mail to the list was a
reliable …
[View More]method as it might get blocked.
Anyway - example attached.
Patrik
[View Less]
On Saturday, May 22, 2004, 8:30:56 AM, Daniel Quinlan wrote:
> Jeff Chan <jeffc(a)surbl.org> writes:
>> So should I open an RFE in bugzilla to request handling of a
>> combined SURBL list in urirhsbl (modulo the later updates of the
> Yes.
Done.
>> corrected name multi.surbl.org and starting from .2 not .1)?
> Why starting at .2 instead of .1? Don't you want to use all of the
> bits available?
Someone said that 127.0.0.1 in an RBL would cause general …
[View More]mail
delivery problems, but I believe that might only apply to an
RBL applied to message headers in an MTA, which SURBLs aren't.
OPM uses the .1 bit, but it does it in the larger context of
127.1.0.x not 127.0.0.X, where .1 could perhaps run into the
loopback address.
http://opm.blitzed.org/info
I suppose we could start with the 2,4,8 bits and expand back
down to .1 if we feel it's safe later. Does that sound ok?
>>> Default TTL for the combined list is generally the longest of the
>>> included lists, which is six hours, while individual entries
>>> inherit the shortest TTL which can be 10 minutes for sc data.
>>> That allows individual entries to expire in BIND appropriately to
>>> their data source.
> Shouldn't the TTL be the shortest of the included lists?
Yes, individual entries would get the shortest TTL if it
appears on multiple lists.
Jeff C.
[View Less]
Written like a true, typical linux lurker!
Sometimes it is better to have one on one with somebody who knows what they
are doing, than going off of some text from Google..
I got a lot of great help, and got it running in less than an hour.. much
less time than it would have taken me to research, read, test, re-research
any questions and implement..
Another, better question is.. why do some people feel compelled to reply
negatively rather than just ignore? I get more traffic on this …
[View More]newsgroup
than I get SPAM.. most of it is completely beyond me, and I'm of no use to
anybody.. but every once in a while I get a message from another newbie that
is running into an issue I have already figured out.. and it is with
pleasure I reply to them.. even though they probably could have just googled
the answer themselves. The rest I glance at, and delete.
Thanks again to everybody on this list that is helpful to those of us that
are either new, time restricted or just plain lost..
-----Original Message-----
From: Ralph Seichter [mailto:mailing-list@seichter.de]
Sent: Thursday, May 20, 2004 4:08 AM
To: SURBL Discussion list
Subject: Re: [SURBL-Discuss] DNS for dummies
rleonard(a)opto22.com wrote:
> Has anybody written a "HOWTO DNS" for dummies..
Why don't people do their homework? Next time, use Google to search for
"HOWTO DNS". It returned approximately 510,000 hits.
--
Mit freundlichen Grüßen / Yours sincerely
Dipl. Inform. Ralph Seichter
HORUS-IT
Ahornweg 10
D-57635 Oberirsen
Tel +49 2686 987880
Fax +49 2686 987889
http://horus-it.de/
_______________________________________________
Discuss mailing list
Discuss(a)lists.surbl.org
http://lists.surbl.org/mailman/listinfo/discuss
[View Less]
205.236.189.57 = www.Default-Homepage-Network.com
thoughts on this?
Chris Santerre
System Admin and SARE Ninja
http://www.rulesemporium.com
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
Charles Darwin
>-----Original Message-----
>From: Raymond Dijkxhoorn [mailto:raymond@prolocation.net]
>Sent: Thursday, May 20, 2004 5:32 AM
>To: Jeff Chan; SURBL Discussion list
>Subject: Re: [SURBL-Discuss] Fwd: Re: ANTI-SURBL technique used by
>spammer
>
>
>Hi!
>
>> I brought it up due to the possible bad uses of this
>technology. It's
>> possible for a spammer to use this service for free
>bandwidth for images and
>> other content (flash, etc).
>&…
[View More]gt;
>> This is just one of those things to hold on to and keep an
>eye out for, if
>> the word get's out, the spammers might try and abuse it.
>From the message
>> boards, most people don't care what it's used for, except
>those using 40 GB
>> per day in illegal movie downloads cause they choose to be a mirror.
>
>> >> Are you aware of http://freecache.org ?
>> >> Take a look here if not:
>> >> http://slashdot.org/articles/04/05/12/1635205.shtml?tid=126&tid=95
>> >> Thanks!
>
>We might tell them about SURBL and ask to implement caching
>only for non
>listed domains. Others implemented things like that allready.
>Jeff, can
>you take that actionpoint?
>
>Bye,
>Raymond.
I think that is a fantastic idea! They want there service to be great. It
can't be if they are blacklisted. I second the motion to contact them. Can't
hurt.
--Chris
[View Less]
Hi all.. I'm a wanna be Linux guy who somehow, even with my own ineptitude,
managed to get SA 2.63 with Qmail up and running on Redhat 9.0! Recently I
got the SURBL's working and they have helped a LOT (I have a very weak box
that is running SA.. so the lookups saved a lot of processing time!)..
however..
I have noticed my outgoing traffic on our T1 has shot through the roof. I
currently have the Linux box using our ISP's DNS server for lookups.. I'm
guessing it would be much more efficient …
[View More]if I had the linux box do it, cache
it.. I've even read about having it transfer the SURBL zones directly so
that lookups remain local..
Has anybody written a "HOWTO DNS" for dummies.. that could help walk me
through setting this up on my Linux box?
Thanks!!!!!!!!!!!!
[View Less]
Thanks Fred,
I have whitelisted freecache.org, which in terms of proper
operations of SURBLs should be all that's needed to prevent
false positives and allow the actual spam sites to be caught.
In terms of using freecache to distribute hosting of the SURBL
web site, we'll look into that.
I am asking freecache.org to consider blocking access
to their services for spammers, as metamark is doing for
redirection using SURBL data.
Jeff C.
__
On Wednesday, May 19, 2004, 3:30:00 PM, Fred Fred …
[View More]wrote:
> Well, I brought this up for a couple of reasons, it can be used for many
> reasons, GOOD and BAD.
> Your idea sounds good, it might also be used for some other heavy data files
> we host for whatever reason.
> I brought it up due to the possible bad uses of this technology. It's
> possible for a spammer to use this service for free bandwidth for images and
> other content (flash, etc).
> This is just one of those things to hold on to and keep an eye out for, if
> the word get's out, the spammers might try and abuse it. From the message
> boards, most people don't care what it's used for, except those using 40 GB
> per day in illegal movie downloads cause they choose to be a mirror.
> Frederic Tarasevicius
> Internet Information Services, Inc.
> http://www.i-is.com/
> 810-794-4400
> mailto:info@i-is.com
> Jeff Chan wrote:
>> On Wednesday, May 19, 2004, 2:22:38 PM, Fred wrote:
>>> Jeff,
>>> Are you aware of http://freecache.org ?
>>> Take a look here if not:
>>> http://slashdot.org/articles/04/05/12/1635205.shtml?tid=126&tid=95
>>> Thanks!
>>
>>> Frederic Tarasevicius
>>
>> Thanks for the info Fred. Sounds like akamai for the rest of us.
>> :)
>>
>> Should we publish the surbl site with it?
>>
>> Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
[View Less]
This is a forwarded message
From: Fred <spamassassin(a)freddyt.com>
To: "Jeff Chan" <jeffc(a)surbl.org>
Date: Wednesday, May 19, 2004, 3:30:00 PM
Subject: ANTI-SURBL technique used by spammer
===8<==============Original message text===============
Well, I brought this up for a couple of reasons, it can be used for many
reasons, GOOD and BAD.
Your idea sounds good, it might also be used for some other heavy data files
we host for whatever reason.
I brought it up due to the …
[View More]possible bad uses of this technology. It's
possible for a spammer to use this service for free bandwidth for images and
other content (flash, etc).
This is just one of those things to hold on to and keep an eye out for, if
the word get's out, the spammers might try and abuse it. From the message
boards, most people don't care what it's used for, except those using 40 GB
per day in illegal movie downloads cause they choose to be a mirror.
Frederic Tarasevicius
Internet Information Services, Inc.
http://www.i-is.com/
810-794-4400
mailto:info@i-is.com
Jeff Chan wrote:
> On Wednesday, May 19, 2004, 2:22:38 PM, Fred wrote:
>> Jeff,
>> Are you aware of http://freecache.org ?
>> Take a look here if not:
>> http://slashdot.org/articles/04/05/12/1635205.shtml?tid=126&tid=95
>> Thanks!
>
>> Frederic Tarasevicius
>
> Thanks for the info Fred. Sounds like akamai for the rest of us.
> :)
>
> Should we publish the surbl site with it?
>
> Jeff C.
===8<===========End of original message text===========
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
[View Less]
Please take a look at my draft document about using rbldnsd with
BIND under FreeBSD:
http://www.surbl.org/rbldnsd-bind-freebsd.html
And let me know if you have any comments, suggestions,
corrections, updates, etc. I wasn't really sure what
interface to put the fake address on so I used loopback.
Is that ok? Style comments are welcome too.
Jeff C.
On Wednesday, May 19, 2004, 2:22:38 PM, Fred wrote:
> Jeff,
> Are you aware of http://freecache.org ?
> Take a look here if not:
> http://slashdot.org/articles/04/05/12/1635205.shtml?tid=126&tid=95
> Thanks!
> Frederic Tarasevicius
Thanks for the info Fred. Sounds like akamai for the rest of us.
:)
Should we publish the surbl site with it?
Jeff C.
:)
I hate to ask.. but which perl module?
-----Original Message-----
From: Raymond Dijkxhoorn [mailto:raymond@prolocation.net]
Sent: Wednesday, May 19, 2004 1:00 PM
To: SURBL Discussion list
Subject: RE: [SURBL-Discuss] DNS for dummies
Hi!
> Thank you! I really appreciate your help.
>
> I'll check in a day or so to see if my traffic outbound to the Internet
has
> decreased.. I'm hoping it will! :)
> And a 'service named start'
>
> It will pickup things, the …
[View More]caching-nameserver is only a config and some
> zones for bind...
Also be sure you are using the latest version of the perl module, thats
also helping to lower traffic, less lookups.
Bye,
Raymond.
_______________________________________________
Discuss mailing list
Discuss(a)lists.surbl.org
http://lists.surbl.org/mailman/listinfo/discuss
[View Less]