Discuss

discuss@lists.surbl.org

1 participants
1867 discussions

RE: [SURBL-Discuss] xs.surbl.org preliminary results
by Owen, Daniel 21 Apr '05

21 Apr '05

This is a different data set. 4/20/05 midnight to midnight CDT total e-mails: 6477 total strikes: 1513 (23.4% of total e-mail) spam strikes: 1513 ham strikes: 0 total messages marked as spam (all rules): 4210 (65% of total e-mail) total messages marked as spam (all rules) also marked by XS: 1478 also in: URIBL_AB_SURBL: 447 (29.5% of XS hits) URIBL_OB_SURBL: 1120 (74% of XS hits) URIBL_PH_SURBL: 0 URIBL_SC_SURBL: 1160 (76.7% of XS hits) URIBL_WS_SURBL: 1124 (74.3% of XS hits) URIBL_JP_SURBL: 1416 (93.6% of XS hits) NOT in any of the above: 61 (.041% of XS hits) Hey if it proves to be fairly FP proof that's 61 less emails I have to deliver per day after I raise the score a bit) -----Original Message----- From: discuss-bounces(a)lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Raymond Dijkxhoorn Sent: Thursday, April 21, 2005 2:23 PM To: SURBL Discussion list Subject: Re: [SURBL-Discuss] xs.surbl.org preliminary results Hi! > total strikes: 204 > spam strikes: 204 > ham strikes: 0 > > total messages marked as spam (all rules): 1495 > total messages marked as spam (all rules) also marked by XS: 204 Would be interesting to check if those would have been picked up by (for example) JP, eg other SURBL lists. If its duplicates all over then it wont help much. I did a compare on the zonefiles but not that much fresh ones inside. So far.... Bye, Raymond. _______________________________________________ Discuss mailing list Discuss(a)lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss This email contains privileged and confidential information intended only for the use of the person to whom it is directed and intended. Any reproduction, dissemination or other use of this email by anyone who is not the intended recipient is strictly prohibited. If you have received this email in error, you should advise the sender immediately and delete the email from your mail box.

1 0

Re: [SURBL-Discuss] missed URI redirector
by List Mail User 21 Apr '05

21 Apr '05

zinciccgcag. com is part of the multitrade group and their attempt to move into the US. The registration address is false (does not exist) - report them to both wdprs and rfci. Also the name servers in ccpatoncejk. biz have a false postal code (and probably more) - also report to wdprs and rfci. For examples see: http://www.rfc-ignorant.org/tools/detail.php?domain=multitrade-corp.com&sub… and http://www.rfc-ignorant.org/tools/detail.php?domain=ddagraniale.com&submitt… Paul Shupak track(a)plectere.com

1 0

xs.surbl.org preliminary results
by Owen, Daniel 21 Apr '05

21 Apr '05

2 sets of hit rates follow. I'll try to find time to send my results on a daily basis as long as the info is useful. As you will see from the message volume this is a fairly small office. All messages are from the Internet. In other words no internal e-mail traffic is counted in any of these numbers. I am using the XS as a 1.5 point spam assassin rule in production so it may have pushed some of these over the top. My cutoff score of 5.8. For the numbers that follow I hand sorted anything that had less than 10 SA points. I rarely ever see a false positives so I'm fairly certain of these numbers. We are very sensitive to false positives so we run a pretty conservative rule base, but I do have some hand crafted rules that have high values that can push a message's spam score through the roof. The difference in strike rate between days is interesting but it's not the same time period. For the future I'll hit the same time period each day even if that means skipping the most recent data. That should show trending better. Of course it could be something else entirely pushing the first set of numbers up. Only time will tell. Set 1: time range 4/19/05 18:22 to 4/20/05 15:19 central time 4514 total e-mails spam strikes: 1783 ham strikes: 0 Set 2: time range 4/20/05 15:20 to 4/21/05 9:57 central time 2027 total e-mails total strikes: 204 spam strikes: 204 ham strikes: 0 total messages marked as spam (all rules): 1495 total messages marked as spam (all rules) also marked by XS: 204 Daniel This email contains privileged and confidential information intended only for the use of the person to whom it is directed and intended. Any reproduction, dissemination or other use of this email by anyone who is not the intended recipient is strictly prohibited. If you have received this email in error, you should advise the sender immediately and delete the email from your mail box.

2 1

[OT] More mirrors needed for New URIBL lists
by Chris Santerre 21 Apr '05

21 Apr '05

We are almost ready to go live with the new lists. However we need more mirrors...err...about 8 more to be safe! Please contact me offlist if you would like to provide a mirror. The more we get , the less traffic for everyone. :) Semi-public Submissions for the black and gray lists are coming soon. Chris Santerre System Admin and SARE/URIBL Ninja http://www.rulesemporium.com Disclaimer: The statements and opinions or URIBL.com are those of URIBL.com only. Any statements and opinions included in this post are not those of SURBL.com or its members. We are not responsible if URIBL.com gets your cat pregnant.

1 0

SMILE !
by Alex Broens 20 Apr '05

20 Apr '05

Talking about redirs... http://r.aol.com/cgi/redir-complex?url=http://www.penthouse.com Alex

1 0

Redirectors and SURBLs
by Jeff Chan 20 Apr '05

20 Apr '05

For SURBLs we're probably not going to blacklist the U.S. Congress, Google, Dell or Microsoft, so a better solution to their redirectors may be for you to make a good faith effort to contact them and let them know about the issue. Talking about the problem on SPAM-L probably won't do much, other than teaching spammers new things they can abuse, which probably doesn't help fight spam very much. By the way, being able to redirect to the SURBL website does not prove that a redirector is open, only that it can redirect to the SURBL website. A better test would be to see if it will redirect to a major spammer's site, for example any that are listed in multiple SURBLs. In case anyone new doesn't already know, here's a letter that may be useful for contacting operators of redirectors and educating them about the problem, and proposing a solution: http://www.surbl.org/redirect.html Please feel free to forward a copy or link to it when you contact the redirectors. And don't be shy about contacting them. Anyone who finds a redirector can help out by doing that. Cheers, Jeff C. -- "If it appears in hams, then don't list it."

6 12

Re: [SURBL-Discuss] Testing: xs.surbl.org (CBL Data)
by David Coulson 20 Apr '05

20 Apr '05

Jeff Chan wrote: > IIRC you already have access to the rsync server where the zones > can be found, so if you'd like to give it a try and/or serve it > publically for testing, that would be wonderful! :-) It's loaded on all of my name servers. David -- David J. Coulson email: david(a)davidcoulson.net web: http://www.davidcoulson.net/ phone: (216) 920-3100 / (216) 258-4942

3 2

RE: [SURBL-Discuss] Rsync access
by Bob Pierce 19 Apr '05

19 Apr '05

Raymond, >> I have sent 3 emails to raymond(a)prolocation.net and 2 web forms >> requesting access from our new server as we will be retiring our old >> server. I haven't heard any response back for the past month. > >You sended a rsync request, and a personal mail _TODAY_ ... just sit back >and relax. Eventualy we will handle the request. I don't believe I was out of order inquiring about this. I sent you emails on March 18th, April 6th, and then again this morning. I had not heard back from any of them, nor from the earlier web form I probably submitted on April 6th. Not knowing whether or not you were still responsible for this, I thought I should also post the question to the list. Thanks for looking after this for us, Bob.

3 2

John Delisle/ho/Ceridian is out of the office.
by John_Delisle＠ceridian.ca 19 Apr '05

19 Apr '05

I will be out of the office starting 04/19/2005 and will not return until 04/20/2005. TESTING OUT OF OFFICE - I'm here..

2 2

Rsync access
by Bob Pierce 19 Apr '05

19 Apr '05

How do I request a change in our rsync access? I have sent 3 emails to raymond(a)prolocation.net and 2 web forms requesting access from our new server as we will be retiring our old server. I haven't heard any response back for the past month. Is there a particular person I should be contacting other than Raymond? Is it possible to get an eta on this? We're needing access changed to a new ip since we are pulling the old server out of production and retiring the old address. Thanks for your help, Bob Pierce Systems Analyst Westman Communications Group pierceb(a)westmancom.com

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss