Discuss

discuss@lists.surbl.org

1862 discussions

RE: [SURBL-Discuss] Possible FP...
by Chris Santerre 03 Feb '06

03 Feb '06

> -----Original Message----- > From: Jeff Chan [mailto:jeffc@surbl.org] > Sent: Friday, February 03, 2006 10:39 AM > To: 'SURBL Discussion list' > Cc: Outblaze Postmaster > Subject: Re: [SURBL-Discuss] Possible FP... > > > On Friday, February 3, 2006, 7:06:08 AM, Chris Santerre wrote: > > Hello SURBL! :) > > > possible FP found today. > > > 2.0 URIBL_OB_SURBL Contains an URL listed in the OB > SURBL blocklist > > [URIs: birtcherproducts .com] > > > I could find no spam history. But you know me, I could be wrong ;) > > > Keep up the great work. Much love from you long lost ape friend. > > > --Chris > > Thanks Chris. Can you clue us in as to why you think it may be > an FP? > > Jeff C. > -- It was sent in a legit email from the designer of it, with a bunch of other legit sites. This one hit SUBL. But all the sites she was talking about seemed legit. Then I couldn't find any spam reports for them. So I figured I'd let you guys know. How you doing Jeff? Are you going to MIT conference this year? --Chris

2 1

RE: [SURBL-Discuss] Possible FP...
by Chris Santerre 03 Feb '06

03 Feb '06

Hello SURBL! :) possible FP found today. 2.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist [URIs: birtcherproducts .com] I could find no spam history. But you know me, I could be wrong ;) Keep up the great work. Much love from you long lost ape friend. --Chris

2 2

whitelist request
by Jaspaul Aggarwal 03 Feb '06

03 Feb '06

Is it possible if you could give me instructions on how I may subscribe to the following whitelist: http://spamcheck.freeapp.net/whitelist-hits.new.log Regards, Jas

2 1

FirstClass 8.1 supports SURBL
by John DeMillion 03 Feb '06

03 Feb '06

FYI, the latest version (v8.1) of the FirstClass groupware system (http://www.firstclass.com) supports the SURBL. John

1 0

NEEDED TODAY!!: Virus Expert Needed For Radio Talk Show
by Rob McEwen 02 Feb '06

02 Feb '06

RE: Virus Expert Needed For Radio Talk Show Specifically, there is a large AM radio station in one of the top 5 largest cities in the U.S. who is looking for an "expert" guest to discuss the Kama Sutra Worm> Here is the article which perked their attention and for which they are looking for advice on: http://news.yahoo.com/fc/tech/computer_security THIS IS VERY SHORT NOTICE! The "segment" where the guest will be needed will be TODAY at 5:06 PM Eastern time for 10-12 minutes. I'd have done this myself if this were more about spam than viruses. Also, don't feel that you have to be a "super Expert"... probably 1/4 - 1/2 of the people on these lists are plenty qualified... (I just don't quite make the cut regarding viruses.) (I'm sending this to surbl, uribl, and SA lists) With such short notice, I don't think they are going to be super picky. If you are interested, e-mail me send me your name, contact phone, e-mail address, and 1-2 sentences about your qualifications. I'll forward these to the contact person at that radio station and I'll reply back to you with that radio station's contact person. My e-mail address is Rob(a)PowerViewSystems.com (...could be a good chance to [subtly] promote your own products/services/business, too.) Time is short... try to reply back within the hour, if possible. Rob McEwen PowerView Systems Rob(a)PowerViewSystems.com (478) 475-9032

1 0

GeoCities site list
by Guy Rosen 30 Jan '06

30 Jan '06

Hi, As part of our BluePedia project, we've set up a list (updated regularly) of GeoCities-based spam sites, based on what we see in the spam our user community reports to us. http://community.bluesecurity.com/bluepedia/DataFeeds/geocities_sites.tx t At the time of writing there are 2,175 live sites in our list, which is a pretty big number. GeoCities remains the #1 spamvertised domain in the spam we receive. What're your directions on how to tackle this phenomenon? Regards, Guy Rosen Lead Analyst, Operations Team Blue Security http://www.bluesecurity.com/ AIM: guyrrosen (double R) ICQ: 294712217

4 9

RE: [SURBL-Discuss] GeoCities site list
by Guy Rosen 30 Jan '06

30 Jan '06

There was a post not long ago on a spammer forum explaining this "Geocities Redirects Hosting system". It costs a spammer just $100/week to "host" his site on these redirectors, and they have a system that automatically creates and rotates Geocities accounts to meet demand. Interestingly, they mentioned that Yahoo have started putting ads alongside some of their redirection sides and that they might be profiting from it. - Guy. -----Original Message----- From: discuss-bounces(a)lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Eric Montr?al Sent: Sunday, January 29, 2006 17:26 To: Jeff Chan; SURBL Discussion list Subject: Re: [SURBL-Discuss] GeoCities site list Jeff Chan wrote: > [...] > >>At the time of writing there are 2,175 live sites in our list, which >>is a pretty big number. GeoCities remains the #1 spamvertised domain >>in the spam we receive. What're your directions on how to tackle this >>phenomenon? >> >> > >I would recommend forwarding them to abuse(a)yahoo.com with an >explanation of where they came from, etc. Yahoo does read their abuse >mail. > > That's a waste of time. They only remove the sites after at least 72H (if at all), well after their 'useful' life. Their spam support service really rocks ! If you want to see how easy it would be to pre-screen and throw away spammy sites have a look at : http://nospam.mailpeers.net/alive_spammy2.txt AOL did it, Tripod did it, and spammers moved away. It's not a technical problem, it's a 'pink contract' problem. Regards Eric. >Jeff C. >-- >Don't harm innocent bystanders. > >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss > > > _______________________________________________ Discuss mailing list Discuss(a)lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss

4 3

Inconsistent list findings
by Edward Brookhouse 25 Jan '06

25 Jan '06

Hi all, I find that if I lookup my domain in question to see if it is on the surbl via http://www.rulesemporium.com/cgi-bin/uribl.cgi URIBL: multi.surbl.org: listed [Blocked, doctorspreferred.com on lists [jp], See: http://www.surbl.org/lists.html] It says it is - specifically the jp - However if I query their list directly http://www.joewein.de/sw/spam-bl-d.htm I can not find my domain. My domain is doctorspreferred.com Any thoughts appreciated, especially in the how do I get off that list category :) Edward ebrooathealthydirectionsdotcom

2 1

domain "w" listed, causing problems
by John DeMillion 24 Jan '06

24 Jan '06

Not sure when this happened, but a plain "w" somehow got listed in the SURBL, at least in the text list version. I've perused the website and the list removal section, but haven't found a way of determining what the source of the "w" is, since the query tools do domain format checking and won't let me query on a plain "w". The "w" shows up in this list: http://www.surbl.org/dns-queries.blocklist.counts.txt It's in the section preceeded by the number "2". The effect of this is that domains that have a "w" in certain places generate false positives. It might be a good idea to run new domains through a simple domain format parsing check to make sure that they're basically valid before adding them to the SURBL. John DeMillion Director of Information Technology Chester County Intermediate Unit

4 3

Fw: [sniffer] Watch out... SURBL & SORBS full of large ISPs and Antispam providres.
by Darrell (support＠invariantsystems.com) 21 Jan '06

21 Jan '06

Jeff/others, Did some issue occur to cause the domains listed below to be populated in SURBL? Darrell ------------------------------------------------------------------------ Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. ----- Original Message ----- From: "Pete McNeil" <madscientist(a)microneil.com> To: <sniffer(a)sortmonster.com> Sent: Tuesday, January 17, 2006 4:27 AM Subject: [sniffer] Watch out... SURBL & SORBS full of large ISPs and Antispam providres. > Hello Sniffer Folks, > > Watch out for false positives. This morning along with the current > spam storm we discovered that SURBL and SORBs are listing a large > number of ISP domains and anti-spam service/software providers. > > As a result, many of these were tagged by our bots due to spam > arriving at our system with those domains and IPs. Most IPs and > domains for these services are coded with "nokens" in our system to > prevent this kind of thing, but a few slipped through. > > We are aggressively hunting any more that might have arrived. > > You may want to temporarily reduce the weight of the experimental IP > and experimental ad-hoc rule groups until we have identified and > removed the bad rules we don't know about yet. > > Please also do your best to report any false positives that you do > identify so that we can remove any bad rules. I don't expect that > there will be too many, but I do want to clear them out quickly if > they are there. > > Please also, if you haven't already, review the false positive > procedures: > http://www.sortmonster.com/MessageSniffer/Help/FalsePositivesHelp.html > > Pay special attention to the rule-panic procedure and feature in > case you are one of the services hit by these bad entries. > > An example of some that we've found in SURBL for example are > declude.com, usinternet.com, and w3.org > > It's not clear yet how large the problem is, but I'm sure it will be > resolved soon. > > Hope this helps, > > Thanks, > _M > > Pete McNeil (Madscientist) > President, MicroNeil Research Corporation > Chief SortMonster (www.sortmonster.com) > Chief Scientist (www.armresearch.com) > > > This E-Mail came from the Message Sniffer mailing list. For information > and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html >

11 13

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss