Discuss

discuss@lists.surbl.org

2 participants
1870 discussions

two-level-tlds
by Mariano Absatz 23 Jun '04

23 Jun '04

Hi, I don't know who's maintaing http://spamcheck.freeapp.net/two-level-tlds but I'd think a couple of domains could be added for .ar (Argentina). I only see: com.ar (commercial) org.ar (non-commercial) net.ar (isp's and the like) Argentina also uses: gov.ar (government) mil.ar (armed forces) edu.ar (universities and university-related research groups) esc.edu.ar (elementary schools, high schools and other (non-universitary educational institutions). Regards.

3 5

Mail-SpamAssassin-SpamCopURI-0.18
by Warren Robinson 23 Jun '04

23 Jun '04

Could you help me ? Have install sapmassassin 2.63 - appears working OK Have installed Mail-SpamAssassin-SpamCopURI-0.18 Using perl, v5.6.1 built for i386-linux Now getting the following errors ============================================================================ debug: uri tests: Done uriRE Failed to compile URI SpamAssassin tests, skipping: (syntax error at /etc/mail/spamassassin/spamcop_uri.cf, rule SPAMCOP_URI_RBL, line 1, near "eval:" syntax error at /usr/share/spamassassin/20_uri_tests.cf, rule E_MAILPROMO_URL, line 178, near "; }" ) debug: Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri snurl.com *.snurl.com debug: Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri snipurl.com *.snipurl.com debug: Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri tinyclick.com *.tinyclick.com debug: Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri babyurl.com *.babyurl.com debug: Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri lin.kz *.lin.kz debug: Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri *.v3.net debug: Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri shorl.com *.shorl.com debug: Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri tinyurl.com *.tinyurl.com debug: Failed to parse line in SpamAssassin configuration, skipping: open_redirect_list_spamcop_uri xurl.us ============================================================================ Any help would be appreciated Regards Warren Robinson warren_ro(a)compuserve.com

1 0

RE: [SURBL-Discuss] Another list to test: ab.surbl.org
by Joseph Burford 23 Jun '04

23 Jun '04

Hi Jeff, > again this one is only hosted on a few name servers now so > please don't use it for production yet. We'd like your feedback > about performance, false positives, etc. Here are some stats from one of my test servers, gives you an idea of what success rate I am seeing from the various SURBL lists. Hope the format doesn't munge too much :) 19/06/2004 2,439 messages 1,572 marked as spam Description Total Ham % Spam % URL in ws.surbl.org 748 4 0.5 744 99.5 URL in ob.surbl.org 722 4 0.6 718 99.4 URL in sc.surbl.org 647 0 0 647 100 URL in ab.surbl.org 416 14 3.4 402 96.6 URL in be.surbl.org 48 1 2.1 47 97.9 20/06/2004 2,093 messages 1,352 marked as spam Description Total Ham % Spam % URL in ob.surbl.org 777 31 4 746 96 URL in ws.surbl.org 731 5 0.7 726 99.3 URL in sc.surbl.org 528 0 0 528 100 URL in ab.surbl.org 404 2 0.5 402 99.5 URL in be.surbl.org 36 0 0 36 100 Regards, Joseph

2 1

Another list to test: ab.surbl.org
by Jeff Chan 23 Jun '04

23 Jun '04

We have turned the top 425 or so domains from Andy Warner's AbuseButler - Spamvertised Sites list: http://spamvertised.abusebutler.com/ into a beta SURBL for testing: ab.surbl.org again this one is only hosted on a few name servers now so please don't use it for production yet. We'd like your feedback about performance, false positives, etc. Andy's data is quite similar in principle to my SpamCop data in sc.surbl.org. His list is ranked by number of batched reports in a 7 day window, and he has various data sources. I'm inviting Andy to discuss this further here. Jeff C.

2 2

redirect site....sort of
by Chris Santerre 22 Jun '04

22 Jun '04

place.cc looks like spammers are using this site. Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

2 1

SF Download Broken?
by Larry Rosenman 18 Jun '04

18 Jun '04

I've tried like 5-6 mirrors to pick up the 2.63 Plug-In, and none of them can read the file. Is there someplace I can FTP the tarball from? Thanks! LER -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 972-414-9812 E-Mail: ler(a)lerctr.org US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

2 2

squid?
by Robert Brooks 18 Jun '04

18 Jun '04

I couldn't find any way of using a dns blacklist such as sc.surbl.org as a squid acl, has anyone done this? -- Robert Brooks, Network Manager, Cable & Wireless UK <robb(a)hyperlink-interactive.co.uk> http://hyperlink-interactive.co.uk/ Tel: +44 (0)20 7339 8600 Fax: +44 (0)20 7339 8601 - Help Microsoft stamp out piracy. Give Linux to a friend today! -

3 2

proxypots
by jm＠jmason.org 17 Jun '04

17 Jun '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jeff Chan writes: >We are also looking into some other potential spam >URI data sources such as proxypots, etc.: > > http://proxypot.org/ Jeff -- a quick note on this; it has to be done very carefully. Many spammers are using "link poisoning" stuff like this: Get ov<A href="http://www.gimbel.org"></A>er 300 medicatlons online shlpp<A href="http://www.omniscient.com"></A>ed over<A href="http://www.proton.net"></A>nig<A href="http://www.cravet.org"></A>ht to your fr<A href="http://www.aristotelean.org"></A>ont do<A href="http://www.barnacle.com"></A>or with no pr<A href="http://www.lordosis.net"></A>escrlption. All of those are "www.{RANDOMWORD}.{com|net|org}". Eventually there's one real link, which *is* SURBL-listed. These are chaff. Now, SORBS for one seems to be listing some of these sites; presumably because they have a spamtrap-driven feed without enough human moderation. That's the danger here. (btw, there's arguments to be made that a better selection mechanism can "weed those out", but that needs to be careful too. - - Ignore .org/.net/.com? spammer will use .biz, .info, and ccTLDs. - - Ignore 0-length links (<a href=...></a>)? spammer will change to use <a href=...>{RANDOMWORD}</a>. - - Ignore "dictionary words" somehow? spammer will use random URLs from google, so "real" sites. so I don't think those approaches have much merit alone.) - --j. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Exmh CVS iD8DBQFA0JPeQTcbUG5Y7woRAnYYAJ9/fZaT3WLmU+gT8aAnT2rcduDo7QCg6BE1 dF1r9ciWtFpEdC4OBHdRSKE= =mnKX -----END PGP SIGNATURE-----

6 6

Local RBL list?
by Jeff Taylor 17 Jun '04

17 Jun '04

I haven't been able to find this covered anywhere, but I would like to use both the spamcop list (which has been working pretty well) and a local URI blacklist in which to put my own domains that I have problems with. Since I find it hard to believe I am the only one wanting to do this, I can only assume I must have missed the how-to somewhere along the way. Can anyone lend a hand, or provide some links on how I can add in my own list?

5 5

Somewhat away from email for a while
by Jeff Chan 17 Jun '04

17 Jun '04

I will be somewhat away from email for a few days. May be able to check in on and off. My hosting company knows how to reach me at support at supranet.net if there are any emergencies. Jeff C.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss