Discuss

discuss@lists.surbl.org

1876 discussions

RE: [SURBL-Discuss] ph.surbl.org
by Thomas Kinghorn 22 Jul '04

22 Jul '04

Thanks Jeff And thanks for not "flaming" my dumb questions. Regards Tom > -----Original Message----- > From: Jeff Chan [mailto:jeffc@surbl.org] > Sent: 22 July 2004 10:44 > To: SURBL Discussion list > Subject: Re: [SURBL-Discuss] ph.surbl.org > > On Thursday, July 22, 2004, 1:38:06 AM, Thomas Kinghorn wrote: > > I have noticed that the plugin for SA 2.63 has sc, ws, ob & ab BUT the > > plugin for SA 3 has ph.surbl.org. > > > What is ph.surbl.org and can it be used with 2.63 as a stand-alone rule > like > > the others. > > ph is a list with some phishing data. It only exists in > multi.surbl.org which is currently supported in SA 3.0. > It does not exist as a standalone list. > > You can find it described in the Lists document: > > http://www.surbl.org/lists.html#ph > > Jeff C. > > _______________________________________________ > Discuss mailing list > Discuss(a)lists.surbl.org > http://lists.surbl.org/mailman/listinfo/discuss

1 0

ph.surbl.org
by Thomas Kinghorn 22 Jul '04

22 Jul '04

Hi All. Just reading the docs. I have noticed that the plugin for SA 2.63 has sc, ws, ob & ab BUT the plugin for SA 3 has ph.surbl.org. What is ph.surbl.org and can it be used with 2.63 as a stand-alone rule like the others. Regards, Tom Kinghorn

2 1

RE: [SURBL-Discuss] SA2.63 make problems
by Thomas Kinghorn 22 Jul '04

22 Jul '04

> -----Original Message----- > From: Jeff Chan [mailto:jeffc@surbl.org] > Sent: 22 July 2004 08:46 > To: discuss(a)lists.surbl.org > Subject: Re: [SURBL-Discuss] SA2.63 make problems > > --- > > t/open_redirect.t 3 768 5 3 60.00% 1-3 > > Failed 1/7 test scripts, 85.71% okay. 3/57 subtests failed, 94.74% okay. > > make: *** [test_dynamic] Error 29 > > Welcome to the SURBL community Thomas, > These errors should be gone in SpamCopURI version 0.19. > > Jeff C. > > _______________________________________________ > Discuss mailing list > Discuss(a)lists.surbl.org > http://lists.surbl.org/mailman/listinfo/discuss Many Thanks Jeff. Is there a work Around in the meantime? Thanks

2 1

Thanks Jeff, 0.019 works on Rh
by Thomas Kinghorn 22 Jul '04

22 Jul '04

Hi Jeff. Thanks for the pointer. 0.019 worked, it just skipped the rd.yahoo.com test. <snip> t/open_redirect....ok 5/5 skipped: Need reliable open redirect to test against - rd.yahoo.com is closed t/spamcopuri.......ok t/whitelist........ok All tests successful, 5 subtests skipped. <snip> I have a bunch of cf files installed. They were downloaded from SARE. Which ones would you advise that I remove? Here is the list: 70_sare_adult.cf 70_sare_bayes_poison_nxm.cf 70_sare_header_abuse.cf 70_sare_oem.cf 70_sare_random.cf 70_sare_specific.cf 70_sare_spoof.cf 70_sc_top200.cf 71_sare_redirect_pre3.0.0.cf 99_FVGT_Tripwire.cf 99_sare_fraud_post25x.cf antidrug.cf backhair.cf bigevil.cf bogus-virus-warnings.cf chickenpox.cf DomainDigits1.cf evilnumbers.cf evilrules.cf Obfu1.cf ratware.cf weeds.cf It is killing the CPU :o$ Regards, Tom Kinghorn

3 2

RE: [SURBL-Discuss] Thanks Jeff, 0.019 works on Rh
by Thomas Kinghorn 22 Jul '04

22 Jul '04

> -----Original Message----- > From: Raymond Dijkxhoorn [mailto:raymond@prolocation.net] > Sent: 22 July 2004 09:32 > To: SURBL Discussion list > Subject: Re: [SURBL-Discuss] Thanks Jeff, 0.019 works on Rh > > Hi! > > > bigevil.cf > > Thats one that is doing a lot if think. CPU wise, its included in > ws.surbl.org, so remove that one... > Do I just add ws in spamcop_uri.cf? The standard 1 from the installation source is # vi spamcop_uri.cf uri SPAMCOP_URI_RBL eval:check_spamcop_uri_rbl('sc.surbl.org','127.0.0.2') describe SPAMCOP_URI_RBL URI's domain appears in spamcop database at sc.surbl.org tflags SPAMCOP_URI_RBL net score SPAMCOP_URI_RBL 3.0 Sorry for the lame question. Thanks Tom

2 1

FW: [SURBL-Discuss] Thanks Jeff, 0.019 works on Rh: GOT IT
by Thomas Kinghorn 22 Jul '04

22 Jul '04

Sorry all. It would help if I read further down in the page :o$ <snip> More SURBL lists ws.surbl.org - sa-blacklist in SURBL form In addition to the original SpamCop URI-derived SURBL sc.surbl.org, we are pleased to have another SURBL compatible with the above plugins, or any other software that can check message body domains against a name-based RBL. <snip> Sorry for wasting your time Regards Tom -----Original Message----- From: Thomas Kinghorn Sent: 22 July 2004 09:59 To: 'SURBL Discussion list' Subject: RE: [SURBL-Discuss] Thanks Jeff, 0.019 works on Rh > -----Original Message----- > From: Raymond Dijkxhoorn [mailto:raymond@prolocation.net] > Sent: 22 July 2004 09:32 > To: SURBL Discussion list > Subject: Re: [SURBL-Discuss] Thanks Jeff, 0.019 works on Rh > > Hi! > > > bigevil.cf > > Thats one that is doing a lot if think. CPU wise, its included in > ws.surbl.org, so remove that one... > Do I just add ws in spamcop_uri.cf? The standard 1 from the installation source is # vi spamcop_uri.cf uri SPAMCOP_URI_RBL eval:check_spamcop_uri_rbl('sc.surbl.org','127.0.0.2') describe SPAMCOP_URI_RBL URI's domain appears in spamcop database at sc.surbl.org tflags SPAMCOP_URI_RBL net score SPAMCOP_URI_RBL 3.0 Sorry for the lame question. Thanks Tom

1 0

SA2.63 make problems
by Thomas Kinghorn 22 Jul '04

22 Jul '04

Hi List. I am new to SURBL and am trying to install On a RH8 platform running sa-exim and SA-2.63 Make is fine Make test fails with the following error. <snip> ]# perl Makefile.PL # SAPATH /usr/lib/perl5/site_perl/5.8.0 # installsitelib /usr/lib/perl5/site_perl/5.8.0 # INSTALLDIRS site Checking if your kit is complete... Looks good Writing Makefile for Mail::SpamAssassin::SpamCopURI # make cp lib/Mail/SpamAssassin/PerMsgStatus.pm blib/lib/Mail/SpamAssassin/PerMsgStatus.pm cp lib/Mail/SpamAssassin/Conf.pm blib/lib/Mail/SpamAssassin/Conf.pm cp lib/Mail/SpamAssassin/SpamCopURI.pm blib/lib/Mail/SpamAssassin/SpamCopURI.pm Manifying blib/man3/Mail::SpamAssassin::Conf.3pm Manifying blib/man3/Mail::SpamAssassin::PerMsgStatus.3pm Manifying blib/man3/Mail::SpamAssassin::SpamCopURI.3pm # make test PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t t/blacklist........ok t/dnsrbl...........ok t/extract_urls.....ok t/mailto...........ok t/open_redirect....NOK 1# Failed test (t/open_redirect.t at line 37) # Failed test (t/open_redirect.t at line 44) t/open_redirect....NOK 2# Failed test (t/open_redirect.t at line 52) t/open_redirect....ok 4/5# Looks like you failed 3 tests of 5. t/open_redirect....dubious Test returned status 3 (wstat 768, 0x300) DIED. FAILED tests 1-3 Failed 3/5 tests, 40.00% okay t/spamcopuri.......ok t/whitelist........ok Failed Test Stat Wstat Total Fail Failed List of Failed ---------------------------------------------------------------------------- --- t/open_redirect.t 3 768 5 3 60.00% 1-3 Failed 1/7 test scripts, 85.71% okay. 3/57 subtests failed, 94.74% okay. make: *** [test_dynamic] Error 29 A shove in the right direction would be appreciated. Many thanks Regards, Tom Kinghorn

2 1

RE: [SURBL-Discuss] RE: 6dos data into ds.surbl.org
by Joseph Burford 21 Jul '04

21 Jul '04

Jeff, > Yikes! I'd say 4 to 5 percent FPs is unworkable for a SURBL.... I should have clarified that. The 4 to 5 percent on close examination is always email that is borderline IMHO. It just didn't end up being tagged as spam in the end. Compared with a .1 to .5 percent FP on the other surbl lists it still isn't that great. As for being unworkable it depends on your setup. I was tagging DS with a low score, one of the great things with SpamAssassin is that you have things like Bayes to combat FPs and the end result is the ham gets through :) Regards, Joseph

3 3

Re: RE: [SURBL-Discuss] Re: sex.surbl.org
by Rob McEwen 20 Jul '04

20 Jul '04

I still vote YES on adding the sex sites (in a separate DNS feed). (1) It seems like all the technology and know-how is in place to do this... maybe with a little tweaking, but nothing different than what has already been done elsewhere. (2) It would be a separate list and its use would be completely voluntary. Therefore, this seems to me to be MORE a question of "are there sufficient YET votes to make it worthwhile"... and NOT so much a question of comparing the "yes" vs. "no" votes because the "no" votes can simply choose to not participate... which is easy.... simply don't do anything different from what you are already doing. (3) Its purpose and scope could easily be explained on the SURBL.org site in its own page. It could even be omitted from being mentioned on any other pages to avoid confusion. Rob McEwen

2 1

RE: [SURBL-Discuss] WS FP? yourdomain-MUNGED.com
by Chris Santerre 20 Jul '04

20 Jul '04

>-----Original Message----- >From: Ryan Thompson [mailto:surbl@sasknow.com] >Sent: Tuesday, July 20, 2004 11:49 AM >To: SURBL Discussion list >Subject: [SURBL-Discuss] WS FP? yourdomain-MUNGED.com > > > >So, I'm a filthy spammer, I guess. I just sent out a mass >email like so: > >> 2. At the opening page, enter either your email address (for >> example, info(a)yourdomain-MUNGED.com), or your username (for >> example, yd-info). > >I was a little surprised to see yourdomain.com come back with hits on >WS. Maybe I'll have to start using >"info(a)yourdomainthatnobodywilleverlistinsurbl.org", but that's a bugger >to word-wrap. :-) > >Seriously, what's the deal? Is yourdomain.com really a spamvertized >site, or is it just an innocent victim? A quick grep of >~10,000s/10,000h >had this hit on 0s/6h. (And only one of them was me :-) > >- Ryan > Quite curious. These show up in the 6dos misc.c file: yourdomain.biz yourdomain.com But no tmuch other then munged listings in NANAS. I think these should be whitelisted!!!! --Chris

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss