Discuss

discuss@lists.surbl.org

1870 discussions

FP in OB ?
by Joseph Burford 14 Oct '04

14 Oct '04

Guys, not sure what the criteria for listing/de-listing in OB is. In this months Microsoft Security update mailout there is a domain mentioned in the credits, persiax.com. Web version includes the same domain... http://www.microsoft.com/technet/security/bulletin/MS04-oct.mspx This is a new domain, about a month old, 0 NANAS, looks like a personal site with 0 content, some guy in Iran who was about to get his 15mins of fame :) Not a whitelist candidate IMHO but am curious why it's in there. Regards, Joseph

2 1

FP on WS
by Joseph Burford 14 Oct '04

14 Oct '04

Hi All, bluedomino.com In my mind a FP on the WS list. Domain age in days: 2168 Associated with CoffeeCup, the age old HTML editing software. Only place I've seen it mentioned is in the normal mailouts from CoffeeCup to people who have downloaded their software or who are on the mailing list. NANAS sightings about 10, some are just reports of customers they host, nothing really recent. I'd be intrigued to know how it got on WS. Regards, Joseph

2 4

Doesn't multi contain everything from WS and others?
by Thomas Johnson 14 Oct '04

14 Oct '04

(Sorry about that - hit send a little too early). Perhaps I'm confused, but shouldn't something listed in WS and JP also be in multi? Here's a domain from an email that made it through our filters: http://y.net.mystuffsupplyMUNGED.com?f4=T12k62 # dig +short @localhost mystuffsupplyMUNGED.com.ws.surbl.org 127.0.0.2 # dig +short mystuffsupplyMUNGED.com.multi.surbl.org <nothing> Am I missing something?

3 4

RE: [SURBL-Discuss] Revised DMOZ data, got Wikipedia domains too
by Chris Santerre 14 Oct '04

14 Oct '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Saturday, October 09, 2004 3:10 AM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] Revised DMOZ data, got Wikipedia domains >too > > >On Friday, October 8, 2004, 11:37:03 PM, Alex Broens wrote: >> tripod and geocities have given spammers a home for many years... and >> there's many other freehosters who have become "victims" as well. > >> if not permitted to blacklist, at least treat as 2nd level >tld so we can >> get rid of the spam coming from them > >That's possible, but not something we've done so far. I don't >see shared domain hosting as a major spam destination. Maybe >they are a minor annoyance, but nothing like the pill spammers >hosted in China, Korea, Brazil, etc. > >The difference is that geocities, tripod, angelfire, etc. ought >to have some incentive to get rid of these minor abusers since >they make so little money from them. The pill/mortgage/warez/etc. >spam hosters probably make a lot more money from their spamming >customers, so they have an incentive too keep them. > >In the case where there is some legitimate company like Yahoo >or Lycos (parents of geocities, tripod, etc) to police their >customers and enforce their AUPs, then spam victims should >report them and let them do the enforcing. Since these >companies are mostly legitimate and probably do spend some >resources dealing with abuse, they have an incentive to >reduce abuse since it probably costs them more money than >it gains them. > >One of the main reasons for doing SURBLs was to be able to >do something about the hosting companies who don't have AUPs >against spam or don't enforce them. > >Bottom line is that tripod, etc. are mostly irrelevant compared >to the professional spam gangs who send a lot more spam. SURBLs >are for listing the domains of the bigger fish who have found >spam-friendly hosts, regardless of where those hosts are. > All I can say to that is, it is small amount....for now. I don't see any harm in treating these as second and thrid TLDs. We are already doing all the same work, and seeing the same domains anyway while looking at spams. Why not just add them as 2-3 level? We are doing all the work now, and just throwing the listing away. --Chris

5 8

voicemessage . com listed in WS
by Fred 14 Oct '04

14 Oct '04

I received a virus today which included a link to virt.voicemessage . com This domain was registered 02-DEC-1996, I hand checked the domain, they appear to be a business partner with Avaya. Just because a virus uses this domain name in a attempt to trick the user, is not a reason to list. This domain appears in ham because when my customers receive undetected viruses, I ask them to send them to me and then it's part of mail I need to receive. Does anyone have any spam from this domain or was it listed solely on the fact that it appeared in a virus the committer received? Thanks!

3 3

submit domain?
by Lindsay Snider 13 Oct '04

13 Oct '04

acarmart DOT com What is our policy for adding domains like that above. It appears to be a link builder w/ no real content. And I appologise for not checking Jeff's website of criteria for adding a domain. I wasn't able to find a link so if any one has a bookmark available, I'd greatly appreciate it. -lindsay

2 2

RE: [SURBL-Discuss] submit domain?
by Chris Santerre 13 Oct '04

13 Oct '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Tuesday, October 12, 2004 7:41 PM >To: SURBL Discuss >Subject: Re: [SURBL-Discuss] submit domain? > > >On Tuesday, October 12, 2004, 1:43:26 PM, Chris Santerre wrote: >>>-----Original Message----- >>>From: Lindsay Snider [mailto:lindsay@pa.net] >>>Sent: Tuesday, October 12, 2004 2:43 PM >>>To: discuss(a)lists.surbl.org >>>Subject: [SURBL-Discuss] submit domain? >>> >>> >>>acarmart DOT com >>> >>>What is our policy for adding domains like that above. It >>>appears to be a >>>link builder w/ no real content. And I appologise for not >>>checking Jeff's >>>website of criteria for adding a domain. I wasn't able to >>>find a link so if >>>any one has a bookmark available, I'd greatly appreciate it. > > >> Jeff made us memorize it! > >> http://www.surbl.org/policy.html > >Speaking of which does anyone else think that policy is >good enough to link/publish yet? > +1 Go ahead ;) and post to public. --Chris

1 0

[ot] If you see this domain in spam....
by Chris Santerre 13 Oct '04

13 Oct '04

I need a shower after we removed this domain from SURBL: hypnoticsellingsecrets.com I would like to know if anyone gets a report of spam that has this domain in it. They just make me feel all icky. The more I read their site, the more I wished we didn't remove them. But...I need a spam. Thanks. --Chris

1 0

OT: tcsh filename expansion in file test
by Jeff Chan 13 Oct '04

13 Oct '04

UNIX question not directly related to SURBLs: does anyone know how to make filename expansion (globbing) happen inside a filetest in a tcsh script: unset noglob if (-e *.surbl.org.changed.multi) then ... Didn't work. It's supposed to test the existence of any files *.surbl.org.changed.multi . Using a specific file name like ws.surbl.org.changed.multi works, but I'd like to wildcard it. This has to do with making multi update sooner when the individual lists update, so maybe it's relevant. ;-) Jeff C. -- "If it appears in hams, then don't list it."

2 2

RE: [SURBL-Discuss] submit domain?
by Chris Santerre 13 Oct '04

13 Oct '04

>-----Original Message----- >From: Lindsay Snider [mailto:lindsay@pa.net] >Sent: Tuesday, October 12, 2004 2:43 PM >To: discuss(a)lists.surbl.org >Subject: [SURBL-Discuss] submit domain? > > >acarmart DOT com > >What is our policy for adding domains like that above. It >appears to be a >link builder w/ no real content. And I appologise for not >checking Jeff's >website of criteria for adding a domain. I wasn't able to >find a link so if >any one has a bookmark available, I'd greatly appreciate it. Jeff made us memorize it! http://www.surbl.org/policy.html ;) --Chris

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss