Discuss

discuss@lists.surbl.org

1876 discussions

Statistics
by Doc Schneider 23 Apr '04

23 Apr '04

Gang, [root@newmail root]# grep SPAMCOP_URI_RBL /home/maddoc/mail/caughtspam|wc -l 361 [root@newmail root]# grep WS_URI_RBL /home/maddoc/mail/caughtspam|wc -l 213 [root@newmail root]# grep BE_URI_RBL /home/maddoc/mail/caughtspam|wc -l 92 [root@newmail root]# All this in 24 hours. Well I did NOT get my usual volume of spam, I did get enough. And FWIW it caught 99% and no FPs! Way kewl! -- -Doc --- MomNDoc Online Consultants http://www.maddoc.net/ momndoc(a)maddoc.net

1 0

ANNOUNCE: Mail::SpamAsssassin::SpamCopURI 0.14
by Eric Kolve 23 Apr '04

23 Apr '04

Release 0.14 is up on sourceforge.net. Sorry about all these releases. This is just a small one to fix the 'Modification of non-creatable array value attempted' error a few people have been seeing. You can fetch it at http://sourceforge.net/projects/spamcopuri --eric

2 4

ANNOUNCE: Mail::SpamAsssassin::SpamCopURI 0.13
by Eric Kolve 23 Apr '04

23 Apr '04

I have just released SpamCopURI 0.13. This release adds some basic query caching as well as registrar based lookups against the RBL. Instead of querying for both the 2nd and 3rd level domain we are now only querying for the 2nd OR the 3rd based on the TLD. Let me know if you see any issues with this: false positives, misses that should be hits, etc. We are now caching the query results on a per test basis so multiple URLs to the same to domain should only get checked once per RBL. There is also a change that fixes a compile error under Perl 5.005 reported on this list. Open redirect resolution is still off by default. I would like to hear how this has worked out for those that have enabled it. Do you think its safe enough to enabled it by default? The latest release can be retrieved from http://sourceforge.net/projects/spamcopuri --eric

5 7

Just found a bunch of these also
by Chris 23 Apr '04

23 Apr '04

Checked back, this started right after I installed .12 last night. >From chris(a)chris.localdomain Thu Apr 22 19:42:01 2004 Return-Path: <chris(a)chris.localdomain> Delivered-To: chris(a)chris.localdomain Received: by chris.localdomain (Postfix, from userid 501) id 4E9E6584002; Thu, 22 Apr 2004 20:42:01 -0400 (EDT) From: root(a)chris.localdomain (Cron Daemon) To: chris(a)chris.localdomain Subject: Cron <chris@chris> /usr/bin/spamcopuri-update X-Cron-Env: <SHELL=/bin/sh> X-Cron-Env: <HOME=/home/chris> X-Cron-Env: <PATH=/usr/bin:/bin> X-Cron-Env: <LOGNAME=chris> Message-Id: <20040423004201.4E9E6584002(a)chris.localdomain> Date: Thu, 22 Apr 2004 20:42:01 -0400 (EDT) Can't locate object method "_fetch_records" via package "Mail::SpamAssassin::SpamCopURI" at /usr/bin/spamcopuri-update line 16. -- Regards Chris A 100% Microsoft free computer Registered Linux User 283774 http://counter.li.org 8:07pm up 16 days, 2:43, 2 users, load average: 0.94, 0.95, 0.68

3 3

Error with the new Spamcop URI rule file
by Chris 23 Apr '04

23 Apr '04

Came home to the below errors today in my log. This is after I removed the # comment # spamcop_uri_resolve_open_redirects 1 Security Violations =-=-=-=-=-=-=-=-=-= Apr 22 15:47:09 chris spamd[19353]: Failed to run SPAMCOP_URI_RBL SpamAssassin test, skipping: ^I(Modification of non-creatable array value attempted, subscript -1 at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamCopURI.pm line 116, <GEN83> line 117. ) Apr 22 15:47:09 chris spamd[19353]: Failed to run WS_URI_RBL SpamAssassin test, skipping: ^I(Modification of non-creatable array value attempted, subscript -1 at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamCopURI.pm line 116, <GEN83> line 117. ) Any ideas anyone? Chris -- Regards Chris A 100% Microsoft free computer Registered Linux User 283774 http://counter.li.org 7:18pm up 16 days, 1:54, 2 users, load average: 0.41, 0.48, 0.46

4 6

RE: [SURBL-Discuss] BigEvil + MidEvil as SURBL
by Chris Santerre 22 Apr '04

22 Apr '04

> -----Original Message----- > From: John Wilcock [mailto:john@tradoc.fr] > Sent: Thursday, April 22, 2004 2:26 AM > To: Jeff Chan; SURBL Discussion list > Subject: Re: [SURBL-Discuss] BigEvil + MidEvil as SURBL > > > On Wed, 21 Apr 2004 14:49:51 -0700, Jeff Chan wrote: > > >> > 1) BigEvil wildcards. Not sure how you would handle these. > > >> Something like > > >> > evil\d{2,4}spam\.com is a general wildcard. Some of those > > >> domains don't even > > >> > exhist. Not sure how SURBL will handle that. > > >> > > >> Yes, I should have mentioned that I'm simply discarding them. > > >> Unfortunately there's no easy way to deal with them. Domains > > >> without any patterns in them, which are a majority, come right > > >> through. The script is at: > > > > > Can we make sure that when you announce this to the > public that they know > > > this! :) > > > I can see the flurry of emails now. > > > > Definitely will mention the differences in the announcement and > > web site! > > Perhaps the ideal would be if the script that converts bigevil to rbl > form could also generate a separate "wildevil" cf file containing only > the wildcard entries from bigevil, so that people can have the best of > both worlds... > > John. Hold off on the wilcard idea for now. Let me figure out with the other guys what we are doing. A few ideas in the mix. But I would let wildcards stay as a regex file. It is crazy to try to lookup things like /\dmeds\d{2,6}\.(?:com|net|biz)/ , that would take a looong time to do just that one! --Chris

3 2

MIMEDefang
by Justin 22 Apr '04

22 Apr '04

Howdy. Can anyone tell me if the SpamCopURI can be used with MIMEDefang. Ie, not running spamd but instead loading the SA perl stuff into memory at launch? spamd isn't going to be an option for me any more so I'm hoping it's possible to use SpamCopURI with MD. Thanks Justin

1 0

And away we go!
by Doc Schneider 22 Apr '04

22 Apr '04

Just wanted to let you all know I now have ws/be/sc all being parsed with the URI plugin. I'll be sure to let you all know how it works. spamassassin -D --lint had no errors so should be ok. -- -Doc --- MomNDoc Online Consultants http://www.maddoc.net/ momndoc(a)maddoc.net

5 6

[SURBL-Discuss] Make test error with Mail-SpamAssassin-SpamCopURI-0.12
by RW Hawkins 22 Apr '04

22 Apr '04

I am trying to get the SpamCopURI working with our Spamassassin setup. I think this approach to spam smashing is very promising, great work! The error I get is as follows: [root@mail-in Mail-SpamAssassin-SpamCopURI-0.12]# perl Makefile.PL Checking if your kit is complete... Looks good Writing Makefile for Mail::SpamAssassin::SpamCopURI [root@mail-in Mail-SpamAssassin-SpamCopURI-0.12]# make mkdir blib mkdir blib/lib mkdir blib/lib/Mail mkdir blib/lib/Mail/SpamAssassin mkdir blib/arch mkdir blib/arch/auto mkdir blib/arch/auto/Mail mkdir blib/arch/auto/Mail/SpamAssassin mkdir blib/arch/auto/Mail/SpamAssassin/SpamCopURI mkdir blib/lib/auto mkdir blib/lib/auto/Mail mkdir blib/lib/auto/Mail/SpamAssassin mkdir blib/lib/auto/Mail/SpamAssassin/SpamCopURI mkdir blib/man3 cp lib/Mail/SpamAssassin/PerMsgStatus.pm blib/lib/Mail/SpamAssassin/PerMsgStatus.pm cp lib/Mail/SpamAssassin/SpamCopURI.pm blib/lib/Mail/SpamAssassin/SpamCopURI.pm cp lib/Mail/SpamAssassin/Conf.pm blib/lib/Mail/SpamAssassin/Conf.pm Manifying blib/man3/Mail::SpamAssassin::PerMsgStatus.3 Manifying blib/man3/Mail::SpamAssassin::SpamCopURI.3 Manifying blib/man3/Mail::SpamAssassin::Conf.3 [root@mail-in Mail-SpamAssassin-SpamCopURI-0.12]# make test PERL_DL_NONLAZY=1 /usr/local/bin/perl -Iblib/arch -Iblib/lib -I/usr/lib/perl5/5.00503/i386-linux -I/usr/lib/perl5/5.00503 -e 'use Test::Harness qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t t/blacklist.........syntax error at blib/lib/Mail/SpamAssassin/SpamCopURI.pm line 107, near "$f :" BEGIN failed--compilation aborted at t/blacklist.t line 4. # No tests run! dubious Test returned status 255 (wstat 65280, 0xff00) Undefined subroutine &Test::Harness::WCOREDUMP called at /usr/lib/perl5/5.00503/Test/Harness.pm line 288. make: *** [test_dynamic] Error 255 From past user errors I am guessing I have something out of date, but not sure exactly what. Thanks in advance, RW

3 5

RE: [SURBL-Discuss] And away we go!
by Chris Santerre 22 Apr '04

22 Apr '04

> -----Original Message----- > From: Doc Schneider [mailto:maddoc@maddoc.net] > Sent: Thursday, April 22, 2004 11:51 AM > To: SURBL Discussion list > Subject: Re: [SURBL-Discuss] And away we go! > > > Chris Santerre wrote: > >>-----Original Message----- > >>From: David Coulson [mailto:david@davidcoulson.net] > >>Sent: Thursday, April 22, 2004 9:38 AM > >>To: SURBL Discussion list > >>Subject: Re: [SURBL-Discuss] And away we go! > >> > >> > >>SpamCopURI stats for one domain here for this morning. > >> > >>Total: 33024 > >>SC 22090 > >>WS 19029 > >>BE 3597 > >> > >>On a similar note, Spamhaus' XBL got hit 23847 times which > is pretty > >>impressive. > >> > >>David > >> > > > > > > And BE will ALWAYS be lower...Why? I use RBLs at the MTA level :) > > > > I knew it would effect my file, but I couldn't let the > company take a hit > > for BigEvil sake. > > I left bigevil.cf in my spamassassin directory and added the RBL for > be.surbl.org and both are catching things!! > > Maybe a suggestion. Might want to make a limited bigevil > which just does > the variable domains. And then folks can use it along with > the RBL be. > Did that make sense? You took the thoughts right out of my noggin! > > Damn I either need a new unix sleep command or more coffee! 8*)) I have a thermos by my monitor at all times. A pot takes to long to brew. A thermos is instant ;) > > I'll run some stats from my test here in a bit and we shall > see what is > what. > > Chris as always you are a "big nerd" HAR! > Oh yeah! Straight C student! And I went to school for none of this stuff. > -Doc (Who has been a nerd for almost half a century!) Ouch! You should take a nap after reading this ;) --Chris

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss