Discuss

discuss@lists.surbl.org

2 participants
1870 discussions

RE: [RulesEmporium] Rbldns and wildcards
by Dallas L. Engelken 24 Apr '04

24 Apr '04

> Indeed, I just realized an embarrassing screw-up on my part. > > There are two different programs with similar names and > slightly different properties,including zone file differences: > > rbldns > > rbldnsd > > We are using rbldnsd zone files. I need to update the web site > to reflect this and post an announcement. > As am I.. I guess I didn't realize there was a rbldns either... In rbldnsd, you can wildcard domains... From # man rbldnsd dnset Set of (possible wildcarded) domain names with associated A and TXT values. Similar to ip4set, but instead of IP addresses, data consists of domain names (not in reverse form). One domain name per line, possible starting with wildcard (either with starâdot (*.) or just a dot). Entry starting with exclamation sign is exclusion. Default value for all subsequent lines may be specified by a line starting with a colon. Wildcards are interpreted as follows: example.com only example.com domain is listed, not subdomains thereof. Not a wildcard entry. *.example.com all subdomains of example.com are listed, but not examâ ple.com itself. .example.com all subdomains of example.com and example.com itself are listed. This is a shortcut: to list a domain name itself and all itâs subdomains, one may either specify two lines (example.com and *.example.com), or one line (.examâ ple.com). Instead of listing FQDN's, why not just list the TLD with a dot in front... For example, list .mailnotice.biz instead of t.mailnotice.biz in case they change to some other letter in front of their TLD. Dallas

2 1

rbldnsd and rsync'ing
by Roger WJ Alterskjær 24 Apr '04

24 Apr '04

Hi all! I've successfully installed rbldnsd and want to set it up along with rsync'ing of sc/ws/be.surbl.org. My question is how to set up the RBLDNSD variable in /etc/sysconfig/rbldnsd and the rsync crontab. So far I've got a tip on rsync: Rsyncing is very easy. You would set up a cron job to call something like: rsync RSYNC_SERVER_NAME_GOES_HERE::surbl/sc.surbl.org.rbldns . Seams simple enough. It's just that darn rbldnsd variable that's got me confused. -- Mvh, Roger WJ Alterskjær Edb-konsulent Vitenskapsmuseet, NTNU

1 0

Fwd: Re: Goofy domain names
by Jeff Chan 24 Apr '04

24 Apr '04

From: Jeff Chan To: spamassassin-users Date: Friday, April 23, 2004, 3:28:49 PM Subject: Goofy domain names ===8<==============Original message text=============== On Friday, April 23, 2004, 7:38:46 AM, Chris Santerre wrote: > This is where BigEvil may start going. I can change mine in 2 secs to use > /\d00\dhosting/ but as soon as I do that, it will be removed from > be.surbl.org. For obvious reasons they can't use wildcards. All signs point > to me changing bigevil over to search for this kind of stuff, and simply add > any static ones I have to ws.surbl.org. But will see. This is where our philosophies clash slightly. SURBLs just want a list of known spam domains. SA rulesets with wildcards try to match entire possible/probable classes of domain names based on observing prior types of variation. Both approaches have their merits. For my purposes, I'd just prefer to get the domains that have already been found in spam. I acknowledge that that doesn't have the predictive value of the class approach, but it also makes FPs less possible in principle. (Though in reality it's not very likely that any legitimate sites are suddenly going to start using rxmeds1.com, rxmeds2.com, rxmeds3.com, etc.) Jeff C. ===8<===========End of original message text===========

3 4

Re: [RulesEmporium] Rbldns and wildcards
by Jeff Chan 24 Apr '04

24 Apr '04

Indeed, I just realized an embarrassing screw-up on my part. There are two different programs with similar names and slightly different properties,including zone file differences: rbldns rbldnsd We are using rbldnsd zone files. I need to update the web site to reflect this and post an announcement. Jeff C. __ On Friday, April 23, 2004, 4:23:48 PM, Chris Santerre wrote: > not sure so I've cc'd the big guy on this one. >>-----Original Message----- >>From: Dallas L. Engelken [mailto:dallase@nmgi.com] >>Sent: Friday, April 23, 2004 4:27 PM >>To: >>Subject: [RulesEmporium] Rbldns and wildcards >> >> >>What is the recommended 'type' of zone for running bigevil via rbldns.. >>'dnset' ? >> >>If dnset is recommended, why arent a lot of the entries in be.surbl.org >>listed as >> >>.domain.com instead of domain.com to cover the TLD and all sub domains? >>I probably missed this discussing didn't I.... >> >> -- Jeff Chan mailto:jeffc@surbl.org-nospam http://www.surbl.org/

1 1

[SURBL-Discuss] Re: [SURBL-Announce] ANNOUNCE: The SARE SURBL+ Checker v0.4
by Ralph Seichter 24 Apr '04

24 Apr '04

> [Linked from the surbl site also... -- Jeff C.] Ok Jeff, you caught me in the middle of a mail asking for this "lookup link", so where is the web cam you installed? ;-) -- Mit freundlichen Grüßen / Yours sincerely Dipl. Inform. Ralph Seichter HORUS-IT Ahornweg 10 D-57635 Oberirsen Tel +49 2686 987880 Fax +49 2686 987889 http://horus-it.de/

2 1

[SURBL-Discuss] Re: [SURBL-Announce] ANNOUNCE: Mail::SpamAsssassin::SpamCopURI 0.11
by Jeff Chan 24 Apr '04

24 Apr '04

On Tuesday, April 20, 2004, 10:51:55 PM, Eric Kolve wrote: > I have just released SpamCopURI version 0.11. This fixes a few > bugs that had been reported and adds open redirect resolution. > This basically takes a URL from say rd.yahoo.com and attempts > to resolve the Location header without ever fetching from > the potential spammy site. > Only the URLs that have hosts that match an address list get > redirect resolution. As well, redirect resolution is off > by default, but can be enabled in the conf file. I have > placed several open redirect sites in the conf file. > The basic requirement is that the redirect return a 300 > level HTTP response when fetching. I placed google.com > in there even though they don't have their own redirect > domain, but this should be fairly safe since most if not > all google URLs are either redirects or searches. Give > it a try and tell me what you think. This is all dependent > upon LWP, but if you don't have LWP everything else > will function as it did before. Eric, you may want to share your redirection resolution strategies with the 3.0 developers. I haven't heard Justin getting beyond patterns yet. ;-) Jeff C.

3 5

RE: [SURBL-Discuss] How effective is SURBL?
by Chris Santerre 23 Apr '04

23 Apr '04

I use sa-stats.pl It isn't like what I'm talking about. Working with the SA devs to keep an outputed DB of score hits. Not logging each hit. But updating a counter. --Chris >-----Original Message----- >From: Doc Schneider [mailto:maddoc@maddoc.net] >Sent: Friday, April 23, 2004 3:35 PM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] How effective is SURBL? > > > > >Chris Santerre wrote: > >>>>What tools are people using to see what are the most hit rulesets? >>> >>>I've been thinking of writing a tool to check out some of >>>those rulesets >>>the spammy crap hits on. >>> >>>Figured if nothing else it would be fun! 8*)) >>> >>> >>> >>>-Doc >> >> >> How about working with the devs to have a function in SA to >dump rule hits >> into a seperate log? Just rule hits. I'd buy that for a dollar! > >Which Developers? I'm game to do something like this. I know there is >already one for SA. sa-stats.pl or some such. Too bad it never has >worked for me. (probably missing a module or something) Ork! > >But hey I sure can whip something up if there is an interest. > >-Doc (Brushes off his coding skills)(needs more WD-40) > >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss >

2 1

RE: [SURBL-Discuss] How effective is SURBL?
by Chris Santerre 23 Apr '04

23 Apr '04

>-----Original Message----- >From: Doc Schneider [mailto:maddoc@maddoc.net] >Sent: Friday, April 23, 2004 2:05 PM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] How effective is SURBL? > > > > > > What tools are people using to see what are the most hit rulesets? > >I've been thinking of writing a tool to check out some of >those rulesets >the spammy crap hits on. > >Figured if nothing else it would be fun! 8*)) > > > >-Doc How about working with the devs to have a function in SA to dump rule hits into a seperate log? Just rule hits. I'd buy that for a dollar! --Chris

3 3

RE: [SURBL-Discuss] How effective is SURBL?
by Chris Santerre 23 Apr '04

23 Apr '04

>-----Original Message----- >From: Don Newcomer [mailto:newcomer@dickinson.edu] >Sent: Friday, April 23, 2004 9:17 AM >To: SURBL Discussion List >Subject: [SURBL-Discuss] How effective is SURBL? > > >Look for yourself. Here are my top 10 rule hits for yesterday: > >18173 HTML_MESSAGE >11898 WS_URI_RBL >11871 MIME_HTML_ONLY >6951 SPAMCOP_URI_RBL >6847 CLICK_BELOW >6035 HTML_LINK_CLICK_HERE >5278 MIME_HTML_NO_CHARSET >5085 MY_SHRT_IMG >4993 COMBINED_FROM >4140 BE_URI_RBL > >Nice work, gentlemen! What's better is the fact that my system load >appears to have dropped considerably. Life is good... > Considering I also wrote MY_SHRT_IMG, this data makes me VERY happy ;) --Chris

3 2

RE: [SURBL-Discuss] Re: Bill Stearns' sa-blacklist available as S URBL: ws.surbl.org
by Chris Santerre 23 Apr '04

23 Apr '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Friday, April 23, 2004 9:05 AM >To: SURBL Discuss >Subject: Re: [SURBL-Discuss] Re: Bill Stearns' sa-blacklist >available as >SURBL: ws.surbl.org > > >On Friday, April 23, 2004, 5:25:06 AM, Raymond Dijkxhoorn wrote: >> So, when >> can we start using the combined lists :) > >We're waiting to hear back from Bill, Chris, Paul, et. al., >about whether they want to combine their rules before they >reach us. Should have a better idea after a conference >call this evening. > >Jeff C. > I think we will find that everyone wants to combine. Just need to find a 'trusted' way for us to all add to one. Emailing domains to one guy for them to add is NUTZ! Happens to me all the time :) --Chris

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss