On Saturday May 16th, we sent out a legitimate newsletter email to our
mailing list consisting of people who opted -in and specifically
requested to receive newsletters. Some of these emails were
classified as spam because of references to either Fanbridge.com or
fburls.com. The emails were sent from the band's domain,
mollysrevenge.com, using the commercial newsletter service, FanBridge.
So how am I supposed to deal with this? Fanbridge is a legitimate
business with thousands of customers. I have no idea why you chose to
blacklist them and I don;t really care, all I know is that legitimate
emails are being intercepted as a result and that's an unacceptable
situation. If this happened with USPS mail, you'd be guilty of a
felony.
Catchall solutions to internet spam that result in legitimate emails
being blocked are unacceptable.
Pete Haworth
http://www.mollysrevenge.comhttp://www.sonicbids.com/MollysRevengehttp://www.myspace.com/mollysrevengeband
Good Evening,
I am writing in hopes that someone can help me resolve this urgent issue. I
am writing on behalf of NYC area rock band Almost One, whos URL is blocked
by your website and I need it removed from the list immediately.
There's no reason why it should be on it since the band only sends out
solicited messages.
I hope to hear from someone soon. I did try entering the URL in the lookup
field and it returns a message that it is not blacklisted, yet this is the
error we get when sending out emails:
----
Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the recipient
domain. We recommend contacting the other email provider for further
information about the cause of this error. The error that the other server
returned was: 552 552 5.2.0 Remote MTA 209.85.222.115: An URL contained in
this message is blacklisted by SURBL. See http://www.surbl.org (state 18).
----
Thanks in advance for your help.
_________________________
A NYC Indie Rock & Roll Band
http://www.almostone.com
keepitoffforlife.com is black listed.
We have never sent an email from this site.
The site just came live only about six weeks ago.
To remove ourselves from the blacklist we must show our typical message headers REQUIRED.
We have no advertising for this site yet, so I have no headers.
So, am I being asked to lie and make something up?
This feels like catch 22.
Any assistance would be greatly appreciated.
Very frustrating, my software engineer who is building the site cannot even reference the site in his emails to me without getting them bounced.
Best Regards,
James Schmidt
james.schmidt(a)netzero.net
Hi,
My ISP (www.bmts.com - Bruce Telecom, reachable at
tech(a)brucetelecom.com) uses surbl to detect and block SPAM, however the
debian mailing lists do not and this results in bounces of mail sent to
the debian mailing lists and through it to me through my provider.
This is bad because the debian mailing lists unsubscribe users who have
too many bounces.
My ISP tells me to contact you to get the offending site removed,
however I don't object to the site blacklisted, but to the
listz.debian.org mail bouncing. I asked them to whitelist it but they
just reiterated that I had to contact you.
I think they are wrong and not understand. Could someone kindly beat
the over the head with instruction on how to whitelist listz.debian.org
so that it is not blocked even if a surbl blacklisted URL is in the
mail?
The address of their tech support is tech(a)brucetelecom.com
Please CC me if this is a busy list as I may then not see the message.
Regards,
Daniel
--
And that's my crabbing done for the day. Got it out of the way early,
now I have the rest of the afternoon to sniff fragrant tea-roses or
strangle cute bunnies or something. -- Michael Devore
GnuPG Key Fingerprint 86 F5 81 A5 D4 2E 1F 1C http://gnupg.org
The C Shore (Daniel Dickinson's Website) http://cshore.is-a-geek.com
Folks,
You've probably not heard of my URL shortener service http://twi.bz/ because
it is very new, but I wanted to appeal to the SURBL folks to accept
twi.bzdomain names within the SURBL lists.
twi.bz is differently from the standard URL shorteners in that it includes
the domain name of the destination site in the twi.bz domain name.
For example, a twi.bz link to amazon.com would be in the form:
amazon.twi.bz/XYZ. A twi.bz link to amazon.ca would be in the form
amazon.ca.twi.bz/XYZ and a twi.bz link to amazon.co.uk would be in the form
amazon.co.uk.twi.bz/XYZ. For .com domains I strip the .com for all the rest
I leave the TLD in place. Since this is in the domain name it should be
easy for them to appear in the SURBL list.
On my side I'll be using SURBL multi on domains submitted to the service to
check for spam. I'm hoping that the visibility in twi.bz domains, they're
ability to appear in SURBL and my checking of SURBL links will make
twi.bzunattractive for spammers.
John.
One of our customers wants to be removed from your WS list. He had been sending mass emails to his customers because he move his headquarters. I tried to fill out your removal form, but I have some trouble with it. I pasted the full source code of the email in the field "full source of message body". But I always get the message "error in message body". Is there any chance, that I can give you the required information directly? OR can you explain to me how I can use the form without getting such errors?
Sincerely,
Moritz Nagl
Telefon +49 (0)89 / 18 94 56 21
Fax +49 (0)89 / 18 94 56 25
moritz(a)wagnerit.com | www.wagnerit.com <http://www.wagnerit.com/>
____________________________________________________
Laden-/Post-/Lieferanschrift: Wagner IT - Hüterweg 24 - 85748 Garching - Germany
Firmensitz: Wagner IT - Isarstraße 17 - 85386 Eching - Germany
Inhaberin: Isabella Wagner - USt.-IdNr. DE259191815 - Steuer-Nr. 115/284/30076.
Good call. BTW - does SURBL need any more resources? I have extra
computing power and bandwidth I can contribute.
SURBL Announcement list [READONLY] wrote:
> For historical reasons, the SURBL public nameservers were serving
> individual lists ab, sc, ob and ws in addition to multi. However
> these individual lists have all been deprecated in favor of multi for
> several years since multi contains all lists. Traffic for the
> individual lists is relatively very low, and no one should be using
> them any more, so in order to reduce unnecessary and redundant network
> traffic we will be turning off public nameservice for the individual
> lists on February 28th, 2009.
>
> Everyone should be using multi.surbl.org instead, and this has been
> the case for many years now. Therefore if anyone is using the
> individual lists, please stop doing so and use multi instead. A
> single query to multi will check all SURBL lists.
>
> http://www.surbl.org/lists.html
>
> Cheers,
>
> Jeff C.
> _______________________________________________
> Announce mailing list
> Announce(a)lists.surbl.org
> http://lists.surbl.org/mailman/listinfo/announce
>
Hello,
I am using http://george.surbl.org/cgi-bin/lookup.cgi
I am trying to remove the domain progressingaspconfirm1.com
I believe I am following the directions correctly. The only section I
am having a problem with is:
Full source of the mesage body: (required) What is 'full source of the
message body'?
I have chosen to view the message in full in gmail and the following
appears. Can you please tell me what the first and last line would be
for the Full Source of the Message Body because I must be excluding or
adding something I'm not supposed to because I get an error when
submitting detailing a problem with this section.
Example Message:.
Delivered-To: john.zulim(a)adrevolution.com
Received: by 10.140.35.7 with SMTP id i7cs411545rvi;
Mon, 5 Jan 2009 09:00:14 -0800 (PST)
Received: by 10.100.3.4 with SMTP id 4mr11138845anc.27.1231174813487;
Mon, 05 Jan 2009 09:00:13 -0800 (PST)
Return-Path: <johnzulim(a)yahoo.com>
Received: from n26.bullet.mail.mud.yahoo.com
(n26.bullet.mail.mud.yahoo.com [68.142.206.221])
by mx.google.com with SMTP id d21si36762694and.46.2009.01.05.09.00.11;
Mon, 05 Jan 2009 09:00:12 -0800 (PST)
Received-SPF: pass (google.com: domain of johnzulim(a)yahoo.com
designates 68.142.206.221 as permitted sender)
client-ip=68.142.206.221;
DomainKey-Status: good (test mode)
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
johnzulim(a)yahoo.com designates 68.142.206.221 as permitted sender)
smtp.mail=johnzulim(a)yahoo.com; domainkeys=pass (test mode)
header.From=johnzulim(a)yahoo.com
Received: from [209.191.108.97] by n26.bullet.mail.mud.yahoo.com with
NNFMP; 05 Jan 2009 17:00:11 -0000
Received: from [76.13.13.26] by t4.bullet.mud.yahoo.com with NNFMP; 05
Jan 2009 17:00:11 -0000
Received: from [76.13.10.177] by t3.bullet.mail.ac4.yahoo.com with
NNFMP; 05 Jan 2009 17:00:10 -0000
Received: from [127.0.0.1] by omp118.mail.ac4.yahoo.com with NNFMP; 05
Jan 2009 17:00:10 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 892938.9901.bm(a)omp118.mail.ac4.yahoo.com
Received: (qmail 64964 invoked by uid 60001); 5 Jan 2009 17:00:10 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Message-ID;
b=FwstWXexedSW3xl/LGaOZrh6SOjg6V7f8iJhovt6a1p7zNWC6fsF2ELfqPS8kvs6bnS/xaZrzEh2Gg6BXbzz2eTdrtiCFDCVdlZ+kN8DYAEJxMGJfoRtkhtWZJ89z3fYDOI4LUsEp7NLq0Ws3uDIbiwkcjeHxMSW/q9ujkPN1W4=;
X-YMail-OSG: kC7bMsIVM1nHi93ONset2qvPSCjnsB.jo_8_uQoH_nqo3HHWDueWhOkujQsjiS8gnjlI7BReY_vJRx3oEAmBuAyqPf4tyQpJHztwbIkpYkI.TrHvdPdGBj2NdifTfJbiZIIbJ8cT6qwVHnd4ITaJjQDMa13FE6zD6EIqJJTHwrawIpoHcNtE.leyZF3ZEyQZ6mvwzhrvFsCx.AcNca8-
Received: from [69.71.97.98] by web59702.mail.ac4.yahoo.com via HTTP;
Mon, 05 Jan 2009 09:00:10 PST
X-Mailer: YahooMailWebService/0.7.260.1
Date: Mon, 5 Jan 2009 09:00:10 -0800 (PST)
From: John Zulim <johnzulim(a)yahoo.com>
Reply-To: johnzulim(a)yahoo.com
Subject: Fw: Confirm Here
To: john.zulim(a)adrevolution.com
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-1128263733-1231174810=:64192"
Message-ID: <795526.64192.qm(a)web59702.mail.ac4.yahoo.com>
--0-1128263733-1231174810=:64192
Content-Type: text/plain; charset=us-ascii
Note: forwarded message attached.
--0-1128263733-1231174810=:64192
Content-Type: message/rfc822
X-Apparently-To: johnzulim(a)yahoo.com via 76.13.12.209; Mon, 05 Jan
2009 08:23:15 -0800
X-YMailISG: v.b.oVMWLDuJZVL_FqiJJNL9YMsoQDvmOxXz1JgsCVM.CLEEMTQ3ghdUXdKvZ7gSV3vm2.jlGnSJgp8D7YuWjm8B_cqEJK8rFli1OClyz70rxXftR6xcHn1ty8GW6RJRiR1PqkPAyHWzDRswA7y2BPIFng.axrXguGMCTDTidVtVTcTFrpDSDI0GvElhJuRADXHWQ14EqeTnG0UOaPg4DciQYJ0pg0XW_LufpjJ4hgsppEABnHN56hORApaX4QwryyUHbLOefvWPvhG7AQ8HTAPr_lYMfxiq8pMb3wwsOTyrgkntuvIFlWdDTHHUbwurkdytuw--
X-Originating-IP: [64.20.245.46]
Authentication-Results: mta173.mail.ac4.yahoo.comfrom=progressingaspconfirm3.com; domainkeys=pass (ok)
Received: from 64.20.245.46 (EHLO mail.progressingaspconfirm3.com)
(64.20.245.46)
by mta173.mail.ac4.yahoo.com with SMTP; Mon, 05 Jan 2009 08:23:15 -0800
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dksignature; d=progressingaspconfirm3.com;
h=Date:Mime-Version:Subject:From:To:Content-Type:List-Unsubscribe:Reply-To:Accreditor:X-Habeas-Report;
b=VISjF1AlDHLIxhy1hl7CaFtQlyN1v/AUXXkdr//rgUVv3E98YgDHht0liXUAoxx0
AhQflwWk6/ggZMweOn5lYhmnI2JA0tp/IoG127m0tKiV/vNNYAIXssfGVMJux4hk
Date: Mon, 05 Jan 2009 10:23:15 -0600
Mime-Version: 1.0
Subject: Confirm Here
From: "Nike vs Adidas Survey" <NikevsAdidasSurvey(a)progressingaspconfirm3.com>
To: <johnzulim(a)yahoo.com>
Content-Type: text/html;
List-Unsubscribe:
<http://www.progressingaspconfirm3.com/scripts/unsub.php?email_md5=c24d3fa43…>
Reply-To: <c24d3fa4312f8302f59b5a94809f3307.79968800.954517136(a)progressingaspconfirm3.com>
Accreditor: Habeas
X-Habeas-Report: Please report use of this mark in spam to
<http://www.habeas.com/report/>
Content-Length: 2536
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<META http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>Brand Survey Panel - Please Confirm</title>
</head>
<body style="font-family:Arial, Helvetica, sans-serif; margin:
0px; padding: 0px; color: rgb(130, 16, 210);">
<div id="message_header"
style="background-image:url('http://static.progressingaspconfirm3.com/content_unindexed/member/header_sp…');
background-repeat:no-repeat; height:164px; left:0; margin:0;
padding:0; position:relative; text-align:center; top:0; width:970px;
z-index:1; ">
<div id="subject" style="float:left; left:0; margin:0 20px 0
95px; padding:0; position:absolute; top:0; width:320px; z-index:3;">
<h1 style="font-size:25pt; font-variant:small-caps;
font-weight:normal; letter-spacing:0px; line-height:40px; margin: 0px;
padding:0px; text-align:justify;">
Brand <strong style="padding: 0pt; display: block;
font-size: 35pt; font-weight: normal; margin-left: 30px; color: rgb(0,
60, 255);">Survey</strong> <em style="display: block; font-style:
normal; margin-left: 60px; text-align: left;">Panel </em>
</h1>
</div>
<div id="system_menu" style="clear:right; float:left;
height:130px; left:430px; margin:0; padding:0; position:absolute;
width:445px; z-index:3; vertical-align: middle;">
<span id="account_options">
<a
style="font-family:cursive,arial,helvetica,sans-serif; font-size:11pt;
text-indent:1px; text-transform:capitalize; color: rgb(0, 0, 255);"
href="http://www.progressingaspconfirm3.com/scripts/profile.php?customer_id=79968…"><img
src="http://static.progressingaspconfirm3.com/content_unindexed/member/edit_prof…"
alt="edit profile" title="edit profile" style="border: 0px none;
vertical-align: middle;"/></a>
<img id="button_devider" style="vertical-align:
middle; margin-left: 5px; margin-right: 5px; padding: 0px; width:3px;
height:34px;" src="http://static.progressingaspconfirm3.com/content_unindexed/member/member_ve…"/>
<a
style="font-family:cursive,arial,helvetica,sans-serif; font-size:11pt;
text-indent:1px; text-transform:capitalize; color: rgb(0, 0, 255);"
href="http://www.progressingaspconfirm3.com/scripts/unsub.php?email_md5=c24d3fa43…
"><img src="http://static.progressingaspconfirm3.com/content_unindexed/member/remove_me…"
alt="remove me" title="remove me" style="border: 0px none;
vertical-align: middle;"/></a>
</span>
<div id="sms_text_and_links" style="float: left;
margin-top:10px;">
Having trouble viewing this email? <a
style="font-family:cursive,arial,helvetica,sans-serif;"
href="http://www.progressingaspconfirm3.com/scripts/view_email.php?o=1982&c=79968…"><img
src="http://static.progressingaspconfirm3.com/content_unindexed/member/click_her…"
alt="Click Here" title="Click Here" style="border: 0px none;"/></a>.
</div>
</div>
</td>
</div>
<div id="message_body" style="width:970px; clear: both; ">
<div id="confirmation_one" style="clear:left; float:left;
padding-left:100px; margin-right:50px; margin-top:12px;
margin-bottom:20px; width:300px; text-align:right; ">
<h2 style="font-size:18px; font-weight:normal; text-indent:28px; ">
Thank you for signing up for the Nike vs Adidas Survey at
Brand Survey Panel.
</h2>
<p style="text-indent: 28px; margin-bottom: 30px;">Click
confirm to get access to one special offer per day.</p>
<p id="confirm_txt" style="font-family:
cursive,arial,helvetica,sans-serif; margin-top: 20px;">
<ul style="line-height: 40px; list-style-type: none;
list-style-image: none; list-style-position: outside;">
<li style="font-size:20pt;"><a
style="font-family:cursive,arial,helvetica,sans-serif;"
href="http://www.progressingaspconfirm3.com/scripts/asp/universal/confirmation.ph…"><img
src="http://static.progressingaspconfirm3.com/content_unindexed/member/confirm_b…"
alt="Confirm" title="Confirm" style="border: 0px none;"/></a></li>
<li style="font-size:11pt;"><a
style="font-family:cursive,arial,helvetica,sans-serif;"
href="http://www.progressingaspconfirm3.com/scripts/unsub.php?email_md5=c24d3fa43…
"><img src="http://static.progressingaspconfirm3.com/content_unindexed/member/i_do_not_…"
alt="I don’t want to confirm" title="I don’t want to confirm"
style="border: 0px none;"/></a></li>
</ul>
</p>
</div>
<div id="left_side" style="float:left; font-size:14px;
line-height:20px; width:372px; ">
<p style="vertical-align:middle; margin: 0px; padding: 0px;
font-size: 21pt;">
<a style="font-family:cursive,arial,helvetica,sans-serif;"
href="http://www.progressingaspconfirm3.com/scripts/asp/universal/confirmation.ph…"><img
alt="Click Here to Confirm" title="Click Here to Confirm"
src="http://static.progressingaspconfirm3.com/content_unindexed/member/arrow_01.…"
style="border: 0px none; margin: 0px; padding: 0px; position:
relative; top: 0px;" /></a>
</p>
</div>
</div>
<div id="message_footer" style="color: #999999; float:left;
clear: both; width: 970px; text-align: center; ">
<img src="http://static.progressingaspconfirm3.com/content_unindexed/member/member_ho…"
style="margin: 0px; padding: 0px; position: relative; top: 20px;
width:822px; height:3px;" />
<div style="margin: 50px; text-align: left; font-size:12px;">
This message was sent by ADRevolution.<br />
<br />
ADRevolution delivers emails for clients with the purpose of helping
them enrich their consumer relationships.
<br />
<br />
ADRevolution is not the company with which you originally registered.
We are an outsourced email solution employed by a variety of different
companies. To the extent your information has been shared with
ADRevolution, it is subject to our strict <a
href="http://static.progressingaspconfirm3.com/content_unindexed/privacy_policy.h…">Privacy
Policy</a>. This Privacy Policy includes a commitment that
ADRevolution will never sell or share your email address with anyone
for any marketing purpose. The Privacy Policy of the site where you
initially registered may be materially different.<br />
<br />
ADRevolution will not send you advertisements unless you confirm your
membership with us.<br />
<br />
If you would no longer like to receive emails from us at any time,
please click the "Remove Me Immediately" link below.<br />
<br />
<a href="http://www.progressingaspconfirm3.com/scripts/unsub.php?email_md5=c24d3fa43…
">Remove Me Immediately</a><br />
<br />
ADRevolution, LLC<br />
106 E. 6th St, Ste 900<br />
Austin, TX 78701<br />
<br />
ADRevolution, LLC was formerly known as Progressing Markets, LLC.<br/>
<br/>
<img src="http://www.progressingaspconfirm3.com/scripts/open.php?email_md5=c24d3fa431…"
border=0>
<p> </p>
<p style="font-family:Arial,Helvetica,sans-serif; text-align:
right; font-size:6pt;">va 1.4.0</p>
</div>
</div>
</body>
</html>
--0-1128263733-1231174810=:64192--
Thanks in Advance,
John Zulim
Linux Systems Administrator
ADRevolution
Office Mobile: 512.963.6030
Home Mobile: 512.905.3274
Fax: 512.473.8578
Hi,
I just wanted to report a false positive with the domain, seonetworker.com.
This domain is owned by my company, Attraction Marketing Formula, LLC. (
attractionmarketingformula.com)
It's a new domain, which is why it may have raised a redflag.
A request for removal was sent, (ST #2452779).
seonetworker.com is a training site for the home business industry and the
owner information is public, which can be found with a 'whois' search.
I've sent multiple request via the recommended channels with no response,
and found this list and read that part of it's function is to report false
positives.
I look forward to contributing further.
Regards,
Fernando Ceballos & Raymond Fong
http://www.surbl.org/faq.html :
> To request removal from a SURBL list, please start with the the SURBL
> Lookup page and follow the instructions on the removal form.
The removal form in case of the "jino-net-MUNGED.ru" domain
(listed in PH and SC) asks for "Sending IP addresses",
"Typical message advertising the web site". Sending, advertising what?
I run a discussion mailing list like this one. A list member posted
an on-topic message to the list mentioning the member's website
http://swallow.jino-net-MUNGED.ru - on-topic for the list,
not phishing/spam/malware/etc. jino-net-MUNGED.ru is a free
web-hosting like geocities.com. What recourse honest, legitimate users
of that webhosting have? Now the message with blacklisted URL
is in the list's archive, new members request a part of archive
(few hundred messages in the body of a letter from an autoresponder),
a free mail service (ngs.ru) the list member uses rejects the letter, I
(who run the autoresponder) get the bounce. What recourse I, the member
and the subdomain's honest owner have?
I don't understand what to fill in the IP, header and body fields of the form.
I tried to send the form not filling some fields and got an error message
with "Please contact us by email at whitelist at our domain if you have
any questions". I wrote to that email address with details and got:
> <Chris_Barton()mcafee.com> (expanded from <whitelist()surbl.org>): host
> sncwsrelay1.nai.com[67.97.80.204] said: 550 Denied - Spam Detection (in
> reply to end of DATA command)
So, Chris is protected from complaints of false positives.
http://www.surbl.org/faq.html :
> It's a good practice to use little or no filtering on your security
> mailing list messages and abuse contact addresses, or to bypss them
> around filtering.
Yeah.
At the same time the list member requested other parts of the list archive,
and I got other bounces:
> SMTP error from remote mail server after end of data:
> host imx5.ngs.ru [195.93.186.194]: 550 5.7.1 URL http://sexmagnet-MUNGED.com
> in your message is blacklisted, see http://www.surbl.org/lists.html
The letters don't contain that URL, I checked. They contain (in the body)
email address of another member @sexmagnet-MUNGED.com
You can check the website: it's one of seven domains of a free mail service
hotpop.com (like hotmail.com or gmail.com). Listed in PH. Huh?
Using that logic, lets block the gmail.com domain: I don't know about hotpop,
but I have evidence that gmail accepts (with an autoreply), but then
completely ignores spam complaints.
Does SURBL care of false positives at all?
I run a MTA too, I for sure shall never use SURBL because I do care of
false positives. But plenty mailadmins who use SpamAssassin and
directly SURBL never suspect what disservce they make for their users.
http://www.surbl.org/faq.html :
> most SC users probably make an effort to uncheck
> legitimate domains to prevent false reporting.
Are you serious?
Elena Shevchenko