Discuss

discuss@lists.surbl.org

2 participants
1870 discussions

FPs - getty images dot com and moz dev dot org
by Steven Champeon 28 Jul '04

28 Jul '04

Guys, why is getty images dot com listed in SURBL? Or moz dev dot org? -- hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2554 w: http://hesketh.com Buy "Cascading Style Sheets: Separating Content from Presentation, 2/e" today! http://www.amazon.com/exec/obidos/ASIN/159059231X/heskecominc-20/ref=nosim/

3 6

FP: cmp events dot com
by Steven Champeon 27 Jul '04

27 Jul '04

Did something change over the past couple days? I'm getting 3-5 FPs a day off multi. -- hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2554 w: http://hesketh.com Buy "Cascading Style Sheets: Separating Content from Presentation, 2/e" today! http://www.amazon.com/exec/obidos/ASIN/159059231X/heskecominc-20/ref=nosim/

2 2

FPs - cooler email dot com and icebase dot com
by Steven Champeon 27 Jul '04

27 Jul '04

Both of these are associated with Strong Week, a legit "what's going on" newsletter received by one of my users here. -- hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2554 w: http://hesketh.com Buy "Cascading Style Sheets: Separating Content from Presentation, 2/e" today! http://www.amazon.com/exec/obidos/ASIN/159059231X/heskecominc-20/ref=nosim/

2 2

Death By DNS
by Rob McEwen 27 Jul '04

27 Jul '04

RE: Death By DNS I never mentioned this before, but these extra lookups can be like firecrackers going off. I do three types of DNS lookups: (1) basic RBL checking of sending server's IP address using sbl-xbl.spamhaus.org (2) content RBL lookup for domains and IP addresses using multi.surbl.org (3) content RBL lookup for IP addresses (not domains) using sbl-xbl.spamhaus.org (BTW - Does anyone have a "feel" for sbl-xbl.spamhaus.org and false positives. I wonder sometimes if that particular RBL list is too strict?) Anyway, the second and third of these two levels can sometimes cause several DNS lookups per one singe message. Eventually, I noticed that my server was slowing down. Web sites were being served slower. Also, my mail server software is NOT know for robustness and several articles on their user's group site mention that it falters if the DNS server is slow or has any problems. So I thought... could there be a connection? My next "project" was to then improve the DNS caching on my Windows 2000 server. I tried to tweak the client DNS caching, but with little success/options. Next, I looked into installing the full Windows 2000 DNS service... but I'm not a network engineer and the settings seemed strange and the instructions confusing. Finally, I found the answer. I found a 3rd party "caching" DNS server which works great for my purposes. It has a lot of good features, like saving cached DNS data between reboots. You can find this software here: http://ntcanuck.com/ After installing it, I notice that web sites on my server which were taking about 2 extra seconds longer to load than they used to take started flashing across the screen instantaneously. I know that my conclusions about this are not scientific, but its hard to argue with results. Rob McEwen

2 1

Syntax error on line 1 near eval:
by David Groce 27 Jul '04

27 Jul '04

I am cross posting, but I need to find an answer quick. I finally removed my rpm installation of Spamassassin and installed via CPAN, which allowed me to install the SpamCopURI plugin as well. When I run spamassssin --lint, I get an error on the SpamCopURI.cf Specifically: Failed to compile URI SpamAssassin tests, skipping: (syntax error at /etc/mail/spamassassin/spamcop_uri.cf, rule SPAMCOP_URI_RBL, line 1, near "eval:" Any ideas why this might be? I've also had problems with SpamAssassin itself since installed via CPAN, where I see these errors: Scalar found where operator expected at (eval 17) line 686, near "} $self" (Missing operator before $self?) Failed to run header SpamAssassin tests, skipping some: syntax error at (eval 17) line 686, near "} $self" Any guesses there? Perhaps related to the SpamCopURI plugin? David Groce CCNA Network Server Analyst/Coordinator North Kitsap School District

2 5

RE: Syntax error on line 1 near eval:
by Randal, Phil 27 Jul '04

27 Jul '04

Martin wrote: > David Groce wrote: > >> I am cross posting, but I need to find an answer quick. I finally >> removed my rpm installation of Spamassassin and installed via CPAN, >> which allowed me to install the SpamCopURI plugin as well. When I run >> spamassssin --lint, I get an error on the SpamCopURI.cf Specifically: >> >> Failed to compile URI SpamAssassin tests, skipping: >> (syntax error at > /etc/mail/spamassassin/spamcop_uri.cf, rule >> SPAMCOP_URI_RBL, line 1, near "eval:" > > I had the same problem when i installed SpamCopUri for the first time. > Check for linewraps in spamcop_uri.cf. That solved my problem. > > / Martin When I patched our spamassassin 2.63 (on Fedora Core 1) to include SpamCopURI it worked, but spamassassin --lint was failing. In the end I tracked it down to spamassassin stuff being in the vendor_perl directory relating to an older release of perl. Copying the appropriate .pm files from SpamCopUri to the appropriate Mail/Spamassassin directory in the /usr/lib/perl5 tree solved that problem. So I'd have a dig in /usr/lib/perl5 looking for Mail/Spamassassin and making sure the SpamCopURI modules are in there. Phil ---- Phil Randal Network Engineer Herefordshire Council Hereford, UK

1 0

RE: SPAM: Phishing attempt?
by Chris Santerre 27 Jul '04

27 Jul '04

>-----Original Message----- >From: kriston(a)MOUSE-WORKS.COM [mailto:kriston@MOUSE-WORKS.COM] >Sent: Monday, July 26, 2004 3:29 AM >To: SPAM-L(a)PEACH.EASE.LSOFT.COM >Subject: Re: SPAM: Phishing attempt? > > >On 26 Jul 2004 at 1:07, David Smith <dbsmith(a)ATBBS.DYNDNS.ORG> wrote: > >> 01o.com belongs to Britemoon, Inc. A quick websearch brings up >> mentions of Britemoon as a spammer, which is why I'm wondering >> if Qwest might not have hired them for this. Is it common for a >> known spammer to go into the phishing business? > >According to here, http://www.britemoon.com/about/index3.html, >Qwest is >one of their clients. Britemoon probably does their email >marketing. I >came across the same thing with Consumer Reports when I confirmed that >they were using a DoubleClick subsidiary to do their "email >marketing", >aka spamming. > NANAS has lots of hits for this guy. Joe Lucas. He send UBE/UCE on behalf of large businesses like Days Inn, Fedex, Qwest, ect....... But it is spam, as they buy lists to send to and there is no opt-in. Not even close to double opt-in :) --Chris

2 1

Make Test Failure
by Ray Dzek 26 Jul '04

26 Jul '04

Is this failure significant? Or can I proceed with the make install? Redhat 8 on 1.4Ghz Celeron with 768MB of RAM. Perl 5.8. Latest Net::DNS installed prior to install of SURBL. Thanks in advance. PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t t/blacklist........ok t/dnsrbl...........ok t/mailto...........ok t/open_redirect....NOK 3# Failed test (t/open_redirect.t at line 35) t/open_redirect....NOK 4# Failed test (t/open_redirect.t at line 37) t/open_redirect....ok 5/8# Looks like you failed 2 tests of 8. t/open_redirect....dubious Test returned status 2 (wstat 512, 0x200) DIED. FAILED tests 3-4 Failed 2/8 tests, 75.00% okay t/spamcopuri.......ok t/whitelist........ok Failed Test Stat Wstat Total Fail Failed List of Failed ---------------------------------------------------------------------------- --- t/open_redirect.t 2 512 8 2 25.00% 3-4 Failed 1/6 test scripts, 83.33% okay. 2/30 subtests failed, 93.33% okay. make: *** [test_dynamic] Error 29 Ray Dzek Network Operations Supervisor Specialized Bicycle Components

2 1

RE: [SURBL-Discuss] Make Test Failure
by Chris Santerre 26 Jul '04

26 Jul '04

>-----Original Message----- >From: Ray Dzek [mailto:rdzek@specialized.com] >Sent: Monday, July 26, 2004 1:47 PM >To: discuss(a)lists.surbl.org >Subject: [SURBL-Discuss] Make Test Failure > > >Is this failure significant? Or can I proceed with the make install? > Proceed! Known issue, and no big deal. Go ahead with your bad self, and make install. --Chris (Feeling much better now, lookout! (: )

2 1

RE: [SURBL-Discuss] {Spam?} RE: someone found a way to beat SURBL
by Chris Santerre 26 Jul '04

26 Jul '04

>-----Original Message----- >From: Rob McEwen [mailto:webmaster@powerviewsystems.com] >Sent: Sunday, July 25, 2004 10:11 PM >To: 'Jeff Chan'; 'SURBL Discussion list' >Subject: [SURBL-Discuss] {Spam?} RE: someone found a way to beat SURBL >Importance: High > > >RE: someone found a way to beat SURBL > >They take the following url: > >http://google.info/url?q= > >and follow this by their own URL HTMLEncoded > >The trick is for the parser to be able to find and decode this >HTMLEncoded >url when gathering URLs for checking against SURBL. > >I purposely did not send this to the discussion group because >I didn't want >this to be "out there" for spammers to know about. However, it >would be good >for the various "parser writers" for the various software >programs that work >with SURBL to be aware of this. > >Rob McEwen >PowerView Systems >rob(a)PowerViewSystems.com >(478) 475-9032 > Standard redirect technique, which there is a SARE rule for and SA 3.0 will nail this no problem. --Chris

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss