Discuss

discuss@lists.surbl.org

2 participants
1870 discussions

rspamd surbl-key
by Marcel Schmidt 26 Apr '19

26 Apr '19

Hi all, does anybody have a good example how to integrate a surbl-key into the rspamd config? Changing only the suffix for multi.surbl seems wrong. Kind regards Marcel Schmidt (Systemintegration) Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-318 https://www.mittwald.de Geschäftsführer: Robert Meyer, Maik Behring St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen

1 0

[WL #MOW-858-96621]: olsuswaenergy . com SURBL Phishing, Malware, Cracked Site Removal Request
by SURBL Whitelist 18 Dec '18

18 Dec '18

Dear Requestor, The site has been removed from the blacklist. We do not have the ability to see if the site has been properly secured. Please hire a security expert to do a full security audit on the web site and all computers used to connect to it. Insecure computers may be broken into again and used for phishing, identity theft, malware, stealing banking passwords, etc., including yours. Ticket Details --------------------------------- Ticket ID: MOW-858-96621 Department: Whitelist Type: Removal Request Status: Open

1 0

SURBL Support
by Sergey Gudimov 15 May '18

15 May '18

Hello community, Is there any chance to get support from SURBL? This link https://support.surbl.org/ doesn’t work I can’t check status of my removal request This email message, including attachments, may contain information that is proprietary, confidential, privileged and/or exempt from disclosure. Please hold it in confidence to protect privilege and confidentiality. Please be advised that the sender of this message is a licensee of SDventures.com and shall not be construed or deemed to be an employee, agent, partner, associate or joint venturer of SDVentures.com. If you are not the intended recipient, then please notify the sender and delete this message. Any viewing, copying, publishing, disclosure, distribution of this information, or the taking of any action in reliance on the contents of this message by unintended recipients is prohibited. This message cannot be guaranteed to be secure or error-free.

1 0

help urgently needed (with removal), but SURBL is not reacting/answering
by Michael Krutwig 02 Feb '18

02 Feb '18

Hello community, id there anyone who can help me? We are DESPERATELY trying to get our domain krumedia.com removed from the ABUSE list. We are a are a legitimate business and not spamming at all. This list entry raises the damage to our company from day to day. Several removal request have been made over the last two weeks. We were receving a confirmation ticket by mail and that was it. If i reply to this ticket - no response. What can i do? We are no spammer, even have no newsletters. We did carefully check all sites for hacks. We did even create an anti spam policy page on our site. The (quite low) traffic on our site never had any suspect traffic peak, so we really don't belive that our domain could have appeared in any mass mailings. We have no clue why our domain is on this list. The common faq and help texts/link doesn't get me further. This is SO MUCH frustrating and it really causes a lot of extra work and damage. What can we do more? Really need HELP! thanks, Michael

1 0

Blacklist SURBL
by Ahmed Tantawy 11 Oct '17

11 Oct '17

Hello, Recently, our domains have been blacklisted by SURBL at least twice and this affects our customers integrating SURBL in their intelligence feed. I'd highly appreciate it if someone could contact me off-list from the team responsible to discuss this further or if anyone point me to how to prevent for this to reoccur in the future as customers depend to connect to those domains to reach our services. Moreover, to shed some light as to why our domains were blacklisted in the first place. Keep in mind, our domains are currently not blacklisted and I can't go through the "form" to remove blacklist. Best Regards, Ahmed Tantawy

2 2

Re: [SURBL-Discuss] false positives with common DNS
by Joe Wein 20 Apr '17

20 Apr '17

> Hello there, > > On Tue 11th Apr some of our company's domains got put on the SURBL "abuse" > list and one of the domains got suspended by the registry due to a report > by SURBL. I'm not aware of any abuse or problems on those domains and the > only common nominator is that they all use the same DNS service, e.g. > > anfe.ma -> listed on "abuse" > anfema.com -> same purpose as anfe.ma, not listed (and using a different > DNS) > lokato.online -> suspended, though completely unused (just an NS record, > nothing else) > > Can anybody explain what went wrong here? Gordon, These listings (#1, #3) were indeed false positives. We aim for near zero false positives, but mistakes do happen :-( The cause was a data error which we corrected as soon as we detected it. Feel free to forward this acknowledgement from our side to the registrar to help get the suspended domain unsuspended. Joe Wein SURBL > > Cheers, > Gordon > > -- > > > > _______________________________________________ > Discuss mailing list > Discuss(a)lists.surbl.org > http://lists.surbl.org/mailman/listinfo/discuss >

2 1

false positives with common DNS
by Gordon Schneider 13 Apr '17

13 Apr '17

Hello there, On Tue 11th Apr some of our company's domains got put on the SURBL "abuse" list and one of the domains got suspended by the registry due to a report by SURBL. I'm not aware of any abuse or problems on those domains and the only common nominator is that they all use the same DNS service, e.g. anfe.ma -> listed on "abuse" anfema.com -> same purpose as anfe.ma, not listed (and using a different DNS) lokato.online -> suspended, though completely unused (just an NS record, nothing else) Can anybody explain what went wrong here? Cheers, Gordon --

1 0

Three level TLDs
by Brooke Babcock 16 Mar '17

16 Mar '17

I have a question about the three level TLDs provided by SURBL. I’m a new user of SURBL and attempting to hook it into our company’s e-mail scanner using the guidelines listed here: http://www.surbl.org/guidelines <http://www.surbl.org/guidelines>. Guideline #2 instructs me to extract the base domain to use in the lookup to SURBL and points me to two different tables - a two level TLD table and the three level TLD table. According to the guidelines… “For any domain on the three level list, check it at the fourth level”. However, in the three level TLD table (http://www.surbl.org/static/three-level-tlds <http://www.surbl.org/static/three-level-tlds>), I see many two level domains. In my spot checking, I always see the same domain in the two level TLD table (http://www.surbl.org/static/two-level-tlds <http://www.surbl.org/static/two-level-tlds>) as well. Examples: fvg.it <http://fvg.it/> gov.ms ic.tr <http://ic.tr/> iki.fr <http://iki.fr/> info.at <http://info.at/> ro.com <http://ro.com/> How do I best treat these domains that show up in both lists? Are they on the three level list by mistake? Or should I do multiple lookups with different URI base domains (3 and 4 level) if the top domain is in both lists? For example, if I were to extract the URI, http://some.domain.fvg.it <http://some.domain.fvg.it/>, should I do a lookup on “some.domain.fvg.it <http://some.domain.fvg.it/>” and “domain.fvg.it <http://domain.fvg.it/>”, because “fvg.it <http://fvg.it/>" appears in both lists? Any help would be appreciated. Thanks much! ~Brooke

2 1

Abuse combat feed
by Rubens Kuhl 20 Feb '17

20 Feb '17

Is there an abuse combat feed available at SURBL ? The hope was to get information that would trigger abuse investigations and possible domain take-downs of phishing/malware that is enjoying benefit from the domain name (e.g., using a domain name like bank-name-security.TLD)... parsing the full URI data seems the most logical option, but that there doesn't seem to exist a TLD-specific feed or an specific $ condition for TLD registries. Ideas ? Tks, Rubens

3 7

Re: [SURBL-Discuss] SURBL Analysis Timing out
by SURBL Role 08 Feb '16

08 Feb '16

On Sunday, February 7, 2016, 5:50:36 PM, Paul Thursby wrote: > Hi, > I am trying to submit a IP delisting for 192.185.76.107 but the > application embedded on http://www.surbl.org/surbl-analysis just keeps > timing out. Can you help me solve this? > Regards Paul Please try it now. It should work. P.S. The IP is not currently listed. Almost always when and IP is listed it's because there is some service on it that is cracked, insecure or abused, such as a web server. Please fully secure all services against abuse and consult with a security expert if you need help.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss