Discuss

discuss@lists.surbl.org

1876 discussions

RE: Bug in Spamcop's surbl add-on module
by Chris Santerre 07 May '04

07 May '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Wednesday, May 05, 2004 4:52 PM >To: SURBL Discuss >Cc: spamassassin-users(a)incubator.apache.org >Subject: Re: Bug in Spamcop's surbl add-on module > > >On Wednesday, May 5, 2004, 1:03:15 PM, Chris Santerre wrote: > >>>From: Jeff Chan [mailto:jeffc@surbl.org] >>>bigevil.domains:e.1asphost.com >>> >>>However we should be taking off the subdomain before it goes into >>>the SURBL form. I'll need to check with Chris on how we can >>>handle that. > >> It's not a bug, its a feature! Actually, no its a bug :) I >have been going >> thru cleaning these sort of things up. However I started at >the begining of >> the B.E. list. This is at rule 181, I haven't even got to >100 yet! This is >> left over from my alpha phase of B.E. I've had a lot more >coffee since then. > >Hi Chris, >Would you mind if I added a quick regex to remove and third or >higher level domains from .com, .biz, .net, .info, etc. from >domains before they go into be? It wouldn't be perfect but >it could help some. > >In other words trim down e.1asphost.com to 1asphost.com (etc) >in my own data munging? > >Jeff C. Jeff my friend, nothing would make me happier :) OK, maybe if you sent me some models bearing beer to ask me. That might be a little better. But baring that, sure :-) --Chris

5 7

Installation Problems of SpamCopURI on RH9
by Ilan Aisic 06 May '04

06 May '04

Hi, I just wanted to report that yesterday I've installed SpamCopURI 0.14 on RedHat 9 with SA 2.63. On first try, running "perl Makeifle.PL" did not work. Apparently, it wanted Mail/SpamAssassin to be on perl 5.8.0 but it was deployed on 5.6.1. After I created a symlink as follows (watch for line breaks): >>> lrwxrwxrwx 1 root root 13 May 5 20:00 /usr/lib/perl5/site_perl/5.8.0/Mail -> ../5.6.1/Mail <<< I proceeded installing SpamCopURI without a problem. I thought that other RH users may encounter the same problem. Regards, -- Ilan Aisic Pointer Software Systems, Ltd.

2 1

Got these errors
by Doc Schneider 06 May '04

06 May '04

I get usual log events sent to me and notice this one. There was just this one that I saw. May 6 01:33:21 newmail spamd[25105]: Failed to run WS_URI_RBL SpamAssassin test, skipping: ^I(Modification of non-creatable array value attempted, subscript -1 at /usr/local/lib/perl5/site_perl/5.8.2/Mail/SpamAssassin/SpamCopURI.pm line 179, <GEN15147> line 175. ) May 6 01:33:21 newmail spamd[25105]: Failed to run SPAMCOP_URI_RBL SpamAssassin test, skipping: ^I(Modification of non-creatable array value attempted, subscript -1 at /usr/local/lib/perl5/site_perl/5.8.2/Mail/SpamAssassin/SpamCopURI.pm line 179, <GEN15147> line 175. ) May 6 01:33:21 newmail spamd[25105]: Failed to run BE_URI_RBL SpamAssassin test, skipping: ^I(Modification of non-creatable array value attempted, subscript -1 at /usr/local/lib/perl5/site_perl/5.8.2/Mail/SpamAssassin/SpamCopURI.pm line 179, <GEN15147> line 175. ) -- -Doc --- MomNDoc Online Consultants http://www.maddoc.net/ momndoc(a)maddoc.net

2 2

form-type URIs correctly extracted?
by Jeff Chan 06 May '04

06 May '04

I've spotted a couple form-enclosed URIs lately, such as: <FORM action=3dhttp:// www =2e seo500 =2e com/submit2=2ephp=20 method=3dpost> (without the spaces in the URI) Wanted to sanity check that urirhsbl and SpamCopURI are both finding these correctly. Can anyone confirm? (Yeah I know I should just read the sources.... ;-) TIA, Jeff C.

1 0

List of yahoo domains?
by Jeff Chan 05 May '04

05 May '04

Does anyone have a list of all the world Yahoo domains? If so would you please forward them to me? Same for any other large, legitimate operations with different names like these. TIA, Jeff C.

1 0

ct.mailresponses.com
by Chris Santerre 05 May '04

05 May '04

I found this link in a bunch of spam. However it may be a shammer. ct.mailresponses.com Thoughts? Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

1 0

RE: Bug in Spamcop's surbl add-on module
by Chris Santerre 05 May '04

05 May '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Wednesday, May 05, 2004 8:26 AM >To: spamassassin-users(a)incubator.apache.org >Cc: SURBL Discuss >Subject: Re: Bug in Spamcop's surbl add-on module > > >On Wednesday, May 5, 2004, 5:18:04 AM, Keith Hackworth wrote: >> I was installing >> a new mail server and testing the surbl lookups, but my test kept >> getting through not being marked as spam. The test I was using was >> http://e.1asphost.com - this is on the be.surbl.org list. ... >> My logs show that the >> system is looking up 1asphost.com, which is NOT on the list. > For some >> reason, it stripped off the "e." > >> It seems that spamcop's surbl doesn't handle subdomains at >all. Anyone >> else seeing this? > >Hmm, it is indeed in BigEvil with the e. : > >bigevil.cf:uri BigEvilList_181 >/\b(?:extreme-rapes\.com|excaliburproducts\.c >om|evansezmoney\.estarnetwork\.com|enjoyadvanced097\.org|emedor >ders\.com|email\. >homemadesimple\.com|ehostzzz\.net|e-g\.com|efreedomweb\.net|ecr >edibledeals\.com| >echofrompeople\.com|e\.1asphost\.com)\b/i > >and it's therefore making it into be.surbl.org with the e. : > >bigevil.domains:e.1asphost.com > >However we should be taking off the subdomain before it goes into >the SURBL form. I'll need to check with Chris on how we can >handle that. > >BTW, SURBL is not a SpamCop project, although we are using >SpamCop URI domains as a data source in the sc.surbl.org list. > >Jeff C. It's not a bug, its a feature! Actually, no its a bug :) I have been going thru cleaning these sort of things up. However I started at the begining of the B.E. list. This is at rule 181, I haven't even got to 100 yet! This is left over from my alpha phase of B.E. I've had a lot more coffee since then. So I will fix that one, But I'm sure there are others ;) --Chris

2 1

[SURBL-Discuss] Re: Proposal to add some anti-phishing data to SURBL
by Jeff Chan 05 May '04

05 May '04

On Wednesday, May 5, 2004, 7:02:45 AM, Smart,Dan Smart,Dan wrote: > Would love to have this made available. I'm surprised this list isn't more > focused on the Phishing issues. Spam is a nuisance, while Phishing can > bring *REAL* damage and loss of privacy. > I, for one, would love such an anti-phishing SURBL. Thanks for the feedback Dan. I agree phishing is probably more potentially damaging that other spams. We should be getting the data into a SURBL, either as part of ws.surbl.org and/or perhaps a future combined list. Jeff C. __ > <<Dan>> > | How do people feel about adding this data to a public SURBL? > | Does this kind of division of free and commercial uses seem > | ok? Would any of the SURBL public name servers have any > | issues with an arrangement like this?

1 0

RE: [SURBL-Discuss] Stupid SPAM
by Chris Santerre 05 May '04

05 May '04

>-----Original Message----- >From: Jose-Marcio.Martins(a)ensmp.fr >[mailto:jose-marcio.martins@ensmp.fr] >Sent: Wednesday, May 05, 2004 3:47 PM >To: SURBL Discussion list >Subject: [SURBL-Discuss] Stupid SPAM > > > > >Hello, > >Take a look at this SPAM : > > http://www.ensmp.fr/~martins/Prozac > >Mainly, check the source. > >The problem is that it comes with many, many URLs. At the beginning, >there are URLs needed by the SPAM itself. After, it puts many >URLs with >font size equals to 1. Most of these last domains aren't spam... 8-) > >Jose-Marcio > Ah it feels like I'm wraped in a warm URL blanket :) Yeah I've been seeing these for a long time when they tried to get around bigevil. This is one of the reasons I got rid of using scripts to pull out URLs. I believe SA 3.0 will handle these correctly. SURBL is touched by a human. So these things get picked up quick. But common users trying to submit these other URLs is where the time consumption will be. :( Show that we kind of have the spammers by the booboo now :P --Chris

1 0

Re: Bug in Spamcop's surbl add-on module
by Jeff Chan 05 May '04

05 May '04

On Wednesday, May 5, 2004, 5:18:04 AM, Keith Hackworth wrote: > I was installing > a new mail server and testing the surbl lookups, but my test kept > getting through not being marked as spam. The test I was using was > http://e.1asphost.com - this is on the be.surbl.org list. ... > My logs show that the > system is looking up 1asphost.com, which is NOT on the list. For some > reason, it stripped off the "e." > It seems that spamcop's surbl doesn't handle subdomains at all. Anyone > else seeing this? Hmm, it is indeed in BigEvil with the e. : bigevil.cf:uri BigEvilList_181 /\b(?:extreme-rapes\.com|excaliburproducts\.c om|evansezmoney\.estarnetwork\.com|enjoyadvanced097\.org|emedorders\.com|email\. homemadesimple\.com|ehostzzz\.net|e-g\.com|efreedomweb\.net|ecredibledeals\.com| echofrompeople\.com|e\.1asphost\.com)\b/i and it's therefore making it into be.surbl.org with the e. : bigevil.domains:e.1asphost.com However we should be taking off the subdomain before it goes into the SURBL form. I'll need to check with Chris on how we can handle that. BTW, SURBL is not a SpamCop project, although we are using SpamCop URI domains as a data source in the sc.surbl.org list. Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss