Discuss

discuss@lists.surbl.org

1867 discussions

RE: [SURBL-Discuss] Re: Bill Stearns' sa-blacklist available as SURBL: ws.surbl.org
by Scott Truman 23 Apr '04

23 Apr '04

On Tuesday, April 20, 2004, 6:10:30 PM, Bill Landry wrote: > ----- Original Message ----- > From: "Jeff Chan" <jeffc(a)surbl.org> >> So the quick answer is they'll probably not be combined. >> >> However we probably will offer a combined version of Bill's >> list and Chris' BigEvil list since they are more similar in >> character. > Jeff, why not one DNS query that supports multiple result codes: > test: somedomain.com.sc.surbl.org > results: > 127.0.0.2 = Spamcop > 127.0.0.3 = WS List > 127.0.0.4 = BigEvil List > 127.0.0.5 = etc... > Same thing multi-test RBLs like AHBL, Sorbs, Blars, FiveTen, NJABL and > others do. That's pretty cool. One could even extend that as such (if they don't already): test: example.com.all.surbl.org ;) results: 127.0.0.2 = SC List 127.0.0.4 = WS List 127.0.0.8 = BigEvil List 127.0.0.16 = Someother List etc.... Multiple hits for the same lookup could be returned by combining the last octet i.e. a result of 127.0.0.10 would indicate the URI was found in both the SC and BigEvil lists. If one was only interested in what SC found, then one would AND the result with 127.0.0.2 just thinking out loud...

5 5

Statistics
by Doc Schneider 23 Apr '04

23 Apr '04

Gang, [root@newmail root]# grep SPAMCOP_URI_RBL /home/maddoc/mail/caughtspam|wc -l 361 [root@newmail root]# grep WS_URI_RBL /home/maddoc/mail/caughtspam|wc -l 213 [root@newmail root]# grep BE_URI_RBL /home/maddoc/mail/caughtspam|wc -l 92 [root@newmail root]# All this in 24 hours. Well I did NOT get my usual volume of spam, I did get enough. And FWIW it caught 99% and no FPs! Way kewl! -- -Doc --- MomNDoc Online Consultants http://www.maddoc.net/ momndoc(a)maddoc.net

1 0

ANNOUNCE: Mail::SpamAsssassin::SpamCopURI 0.14
by Eric Kolve 23 Apr '04

23 Apr '04

Release 0.14 is up on sourceforge.net. Sorry about all these releases. This is just a small one to fix the 'Modification of non-creatable array value attempted' error a few people have been seeing. You can fetch it at http://sourceforge.net/projects/spamcopuri --eric

2 4

ANNOUNCE: Mail::SpamAsssassin::SpamCopURI 0.13
by Eric Kolve 23 Apr '04

23 Apr '04

I have just released SpamCopURI 0.13. This release adds some basic query caching as well as registrar based lookups against the RBL. Instead of querying for both the 2nd and 3rd level domain we are now only querying for the 2nd OR the 3rd based on the TLD. Let me know if you see any issues with this: false positives, misses that should be hits, etc. We are now caching the query results on a per test basis so multiple URLs to the same to domain should only get checked once per RBL. There is also a change that fixes a compile error under Perl 5.005 reported on this list. Open redirect resolution is still off by default. I would like to hear how this has worked out for those that have enabled it. Do you think its safe enough to enabled it by default? The latest release can be retrieved from http://sourceforge.net/projects/spamcopuri --eric

5 7

Just found a bunch of these also
by Chris 23 Apr '04

23 Apr '04

Checked back, this started right after I installed .12 last night. >From chris(a)chris.localdomain Thu Apr 22 19:42:01 2004 Return-Path: <chris(a)chris.localdomain> Delivered-To: chris(a)chris.localdomain Received: by chris.localdomain (Postfix, from userid 501) id 4E9E6584002; Thu, 22 Apr 2004 20:42:01 -0400 (EDT) From: root(a)chris.localdomain (Cron Daemon) To: chris(a)chris.localdomain Subject: Cron <chris@chris> /usr/bin/spamcopuri-update X-Cron-Env: <SHELL=/bin/sh> X-Cron-Env: <HOME=/home/chris> X-Cron-Env: <PATH=/usr/bin:/bin> X-Cron-Env: <LOGNAME=chris> Message-Id: <20040423004201.4E9E6584002(a)chris.localdomain> Date: Thu, 22 Apr 2004 20:42:01 -0400 (EDT) Can't locate object method "_fetch_records" via package "Mail::SpamAssassin::SpamCopURI" at /usr/bin/spamcopuri-update line 16. -- Regards Chris A 100% Microsoft free computer Registered Linux User 283774 http://counter.li.org 8:07pm up 16 days, 2:43, 2 users, load average: 0.94, 0.95, 0.68

3 3

Error with the new Spamcop URI rule file
by Chris 23 Apr '04

23 Apr '04

Came home to the below errors today in my log. This is after I removed the # comment # spamcop_uri_resolve_open_redirects 1 Security Violations =-=-=-=-=-=-=-=-=-= Apr 22 15:47:09 chris spamd[19353]: Failed to run SPAMCOP_URI_RBL SpamAssassin test, skipping: ^I(Modification of non-creatable array value attempted, subscript -1 at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamCopURI.pm line 116, <GEN83> line 117. ) Apr 22 15:47:09 chris spamd[19353]: Failed to run WS_URI_RBL SpamAssassin test, skipping: ^I(Modification of non-creatable array value attempted, subscript -1 at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamCopURI.pm line 116, <GEN83> line 117. ) Any ideas anyone? Chris -- Regards Chris A 100% Microsoft free computer Registered Linux User 283774 http://counter.li.org 7:18pm up 16 days, 1:54, 2 users, load average: 0.41, 0.48, 0.46

4 6

RE: [SURBL-Discuss] BigEvil + MidEvil as SURBL
by Chris Santerre 23 Apr '04

23 Apr '04

> -----Original Message----- > From: John Wilcock [mailto:john@tradoc.fr] > Sent: Thursday, April 22, 2004 2:26 AM > To: Jeff Chan; SURBL Discussion list > Subject: Re: [SURBL-Discuss] BigEvil + MidEvil as SURBL > > > On Wed, 21 Apr 2004 14:49:51 -0700, Jeff Chan wrote: > > >> > 1) BigEvil wildcards. Not sure how you would handle these. > > >> Something like > > >> > evil\d{2,4}spam\.com is a general wildcard. Some of those > > >> domains don't even > > >> > exhist. Not sure how SURBL will handle that. > > >> > > >> Yes, I should have mentioned that I'm simply discarding them. > > >> Unfortunately there's no easy way to deal with them. Domains > > >> without any patterns in them, which are a majority, come right > > >> through. The script is at: > > > > > Can we make sure that when you announce this to the > public that they know > > > this! :) > > > I can see the flurry of emails now. > > > > Definitely will mention the differences in the announcement and > > web site! > > Perhaps the ideal would be if the script that converts bigevil to rbl > form could also generate a separate "wildevil" cf file containing only > the wildcard entries from bigevil, so that people can have the best of > both worlds... > > John. Hold off on the wilcard idea for now. Let me figure out with the other guys what we are doing. A few ideas in the mix. But I would let wildcards stay as a regex file. It is crazy to try to lookup things like /\dmeds\d{2,6}\.(?:com|net|biz)/ , that would take a looong time to do just that one! --Chris

3 2

MIMEDefang
by Justin 23 Apr '04

23 Apr '04

Howdy. Can anyone tell me if the SpamCopURI can be used with MIMEDefang. Ie, not running spamd but instead loading the SA perl stuff into memory at launch? spamd isn't going to be an option for me any more so I'm hoping it's possible to use SpamCopURI with MD. Thanks Justin

1 0

And away we go!
by Doc Schneider 22 Apr '04

22 Apr '04

Just wanted to let you all know I now have ws/be/sc all being parsed with the URI plugin. I'll be sure to let you all know how it works. spamassassin -D --lint had no errors so should be ok. -- -Doc --- MomNDoc Online Consultants http://www.maddoc.net/ momndoc(a)maddoc.net

5 6

[SURBL-Discuss] Make test error with Mail-SpamAssassin-SpamCopURI-0.12
by RW Hawkins 22 Apr '04

22 Apr '04

I am trying to get the SpamCopURI working with our Spamassassin setup. I think this approach to spam smashing is very promising, great work! The error I get is as follows: [root@mail-in Mail-SpamAssassin-SpamCopURI-0.12]# perl Makefile.PL Checking if your kit is complete... Looks good Writing Makefile for Mail::SpamAssassin::SpamCopURI [root@mail-in Mail-SpamAssassin-SpamCopURI-0.12]# make mkdir blib mkdir blib/lib mkdir blib/lib/Mail mkdir blib/lib/Mail/SpamAssassin mkdir blib/arch mkdir blib/arch/auto mkdir blib/arch/auto/Mail mkdir blib/arch/auto/Mail/SpamAssassin mkdir blib/arch/auto/Mail/SpamAssassin/SpamCopURI mkdir blib/lib/auto mkdir blib/lib/auto/Mail mkdir blib/lib/auto/Mail/SpamAssassin mkdir blib/lib/auto/Mail/SpamAssassin/SpamCopURI mkdir blib/man3 cp lib/Mail/SpamAssassin/PerMsgStatus.pm blib/lib/Mail/SpamAssassin/PerMsgStatus.pm cp lib/Mail/SpamAssassin/SpamCopURI.pm blib/lib/Mail/SpamAssassin/SpamCopURI.pm cp lib/Mail/SpamAssassin/Conf.pm blib/lib/Mail/SpamAssassin/Conf.pm Manifying blib/man3/Mail::SpamAssassin::PerMsgStatus.3 Manifying blib/man3/Mail::SpamAssassin::SpamCopURI.3 Manifying blib/man3/Mail::SpamAssassin::Conf.3 [root@mail-in Mail-SpamAssassin-SpamCopURI-0.12]# make test PERL_DL_NONLAZY=1 /usr/local/bin/perl -Iblib/arch -Iblib/lib -I/usr/lib/perl5/5.00503/i386-linux -I/usr/lib/perl5/5.00503 -e 'use Test::Harness qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t t/blacklist.........syntax error at blib/lib/Mail/SpamAssassin/SpamCopURI.pm line 107, near "$f :" BEGIN failed--compilation aborted at t/blacklist.t line 4. # No tests run! dubious Test returned status 255 (wstat 65280, 0xff00) Undefined subroutine &Test::Harness::WCOREDUMP called at /usr/lib/perl5/5.00503/Test/Harness.pm line 288. make: *** [test_dynamic] Error 255 From past user errors I am guessing I have something out of date, but not sure exactly what. Thanks in advance, RW

3 5

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss