Discuss

discuss@lists.surbl.org

1 participants
1867 discussions

Re: More spams with Zdnet redirector
by J. Fowler 08 Apr '05

08 Apr '05

I posted to the CNET financial message boards on Yahoo and got this response: http://finance.yahoo.com/q/mb?s=CNET ==== Re: CNet supporting spammers NOT* *Folks, We're aware of the abuse, and are shutting down the URLs as we learn of them. We are NOT supporting spammers or phishers. Stephen Howard-Sarin VP, ZDNet.com ===

2 2

Re: [SURBL-Discuss] Re: More spams with Zdnet redirector
by List Mail User 08 Apr '05

08 Apr '05

>... > >On Thursday, April 7, 2005, 1:11:26 PM, J. Fowler wrote: >> I posted to the CNET financial message boards on Yahoo and got this response: > >> http://finance.yahoo.com/q/mb?s=CNET > >> ==== >> Re: CNet supporting spammers NOT* >> *Folks, > >> We're aware of the abuse, and are shutting down the URLs as we learn of them. We are NOT supporting spammers or phishers. > >> Stephen Howard-Sarin >> VP, ZDNet.com >> === > >Can you LART him with: > > http://www3.surbl.org/redirect.html > >Jeff C. >-- >"If it appears in hams, then don't list it." > >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss > Old email: Stephen Howard-Sarin <shs(a)cnet.com> Paul Shupak track(a)plectere.com

1 0

Re: [SURBL-Discuss] Re: More spams with Zdnet redirector
by List Mail User 08 Apr '05

08 Apr '05

>... > >I posted to the CNET financial message boards on Yahoo and got this response: > >http://finance.yahoo.com/q/mb?s=CNET > >==== >Re: CNet supporting spammers NOT* >*Folks, > >We're aware of the abuse, and are shutting down the URLs as we learn of them. We are NOT supporting spammers or phishers. > >Stephen Howard-Sarin >VP, ZDNet.com >=== > >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss > That sounds a lot like "after the first million or so emails are sent we block the redirector for that URL". It seems to be exactly the same as running an open relay and cutting off access *after* someone complains. Now, of course the same spammer can use the site again tomorrow, with a new domain and a $10 investment. The only safe way to operate a redirector is exactly like running a mail server - Only those clients/domains listed *in advance* can be allowed: Anything else is "supporting spammers"! How many of you would run an open SMTP relay and only blacklist a machine or domain *after* you learn about it sending "abusive" emails? (That's probably why he's a VP, not an engineer.) Paul Shupak track(a)plectere.com

1 0

ZDNet spamity calamity
by Matthew Wilson 08 Apr '05

08 Apr '05

See www.oct17.com and www.october17.com for his contact information. > -----Original Message----- > From: discuss-bounces(a)lists.surbl.org > [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Jeff Chan > Sent: Thursday, April 07, 2005 8:40 PM > To: J. Fowler > Cc: discuss(a)lists.surbl.org > Subject: Re: [SURBL-Discuss] Re: More spams with Zdnet redirector > > On Thursday, April 7, 2005, 1:11:26 PM, J. Fowler wrote: > > I posted to the CNET financial message boards on Yahoo and > got this response: > > > http://finance.yahoo.com/q/mb?s=CNET > > > ==== > > Re: CNet supporting spammers NOT* > > *Folks, > > > We're aware of the abuse, and are shutting down the URLs as > we learn of them. We are NOT supporting spammers or phishers. > > > Stephen Howard-Sarin > > VP, ZDNet.com > > === > > Can you LART him with: > > http://www3.surbl.org/redirect.html > > Jeff C. > -- > "If it appears in hams, then don't list it." > > _______________________________________________ > Discuss mailing list > Discuss(a)lists.surbl.org > http://lists.surbl.org/mailman/listinfo/discuss > > >

2 1

RE: [SURBL-Discuss] Re: More spams with Zdnet redirector
by Chris Santerre 08 Apr '05

08 Apr '05

>-----Original Message----- >From: Raymond Dijkxhoorn [mailto:raymond@surbl.org] >Sent: Thursday, April 07, 2005 4:33 PM >To: SURBL Discussion list >Subject: RE: [SURBL-Discuss] Re: More spams with Zdnet redirector > > >Hi! > >>> We're aware of the abuse, and are shutting down the URLs as we >>> learn of them. We are NOT supporting spammers or phishers. > >> If that is the method they want, maybe we could forward them >a few 100k >> domains for them to blacklist? >> >> They will fight a losing battle with this method. > >They could start using SURBL, then its all the same ;) > I believe Jeff had asked them that already. --Chris

2 1

RE: [SURBL-Discuss] Re: More spams with Zdnet redirector
by Chris Santerre 08 Apr '05

08 Apr '05

>-----Original Message----- >From: J. Fowler [mailto:spamtrap@cvip.net] >Sent: Thursday, April 07, 2005 4:11 PM >To: discuss(a)lists.surbl.org >Subject: [SURBL-Discuss] Re: More spams with Zdnet redirector > > >I posted to the CNET financial message boards on Yahoo and got >this response: > >http://finance.yahoo.com/q/mb?s=CNET > >==== >Re: CNet supporting spammers NOT* >*Folks, > >We're aware of the abuse, and are shutting down the URLs as we >learn of them. We are NOT supporting spammers or phishers. If that is the method they want, maybe we could forward them a few 100k domains for them to blacklist? They will fight a losing battle with this method. --Chris

3 2

Leaving SURBL
by Chris Santerre 08 Apr '05

08 Apr '05

Greetings Everyone, As of today, I am leaving SURBL for private reasons. SURBL continues to be one of the best antispam measures. I will be forming my own public URI lists. One black and one gray. But they will not be affiliated with SURBL. (So I'll most likely be begging for mirrors later!) I'll continue to be part of the whitelist group for a while, in case my old submissions need explanation. Consider the new black list to be more aggressive then WS, but striving for the same zero FP rate as WS. Also all domains manually checked. The gray list will be for mainsleeze, and will cause FPs. I'll post more info about the lists after I get some mirrors. Did I mention I need mirrors? :) Thanks, Chris (Needs mirrors) Santerre System Admin and SARE Ninja http://www.rulesemporium.com

5 8

Re: [SURBL-Discuss] More spams with Zdnet redirector
by List Mail User 07 Apr '05

07 Apr '05

>... > >On Wednesday, April 6, 2005, 11:54:56 AM, Patrik Nilsson wrote: >> At 01:26 2005-04-06 -0700, Jeff Chan wrote: >>>Raymond, Paul and others, please LART them. >>> >>>We're not going to blacklist zdnet. > >> It's not zdnet, it's chkpt.zdnet.com. > >> Does chkpt.zdnet.com show up in ham? > >> http://groups-beta.google.com/groups?q=%22chkpt.zdnet.com%22&start=10&scori… > >> Are we still 100% opposed to trying to find a way to include sub-domains in >> surbls? > >> Patrik > >It's possible to list subdomains, but this one chkpt.zdnet.com >would still probably not be appropriate since it probably has >legitimate uses. Also subdomains may not be checked by SURBL >applications. > >Jeff C. >-- >"If it appears in hams, then don't list it." > >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss > It is actually worse than a subdomain. If it were a simple "static" name, maybe you could list the IP. But it is a CNAME with a five minute TTL, and it *does* seem to change regularly! % dig chkpt.zdnet.com any @ns.cnet.com ; <<>> DiG 9.3.0 <<>> chkpt.zdnet.com any @ns.cnet.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18416 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3 ;; QUESTION SECTION: ;chkpt.zdnet.com. IN ANY ;; ANSWER SECTION: chkpt.zdnet.com. 300 IN CNAME c10-dw-xw-lb.cnet.com. ;; AUTHORITY SECTION: zdnet.com. 86400 IN NS ns.cnet.com. zdnet.com. 86400 IN NS ns2.cnet.com. zdnet.com. 86400 IN NS ns3.cnet.com. ;; ADDITIONAL SECTION: ns.cnet.com. 86400 IN A 216.239.126.10 ns2.cnet.com. 86400 IN A 206.16.0.71 ns3.cnet.com. 86400 IN A 216.239.120.69 ;; Query time: 19 msec ;; SERVER: 216.239.126.10#53(ns.cnet.com) ;; WHEN: Thu Apr 7 07:58:20 2005 ;; MSG SIZE rcvd: 166 % dig c10-dw-xw-lb.cnet.com any @ns.cnet.com ; <<>> DiG 9.3.0 <<>> c10-dw-xw-lb.cnet.com any @ns.cnet.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46613 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3 ;; QUESTION SECTION: ;c10-dw-xw-lb.cnet.com. IN ANY ;; ANSWER SECTION: c10-dw-xw-lb.cnet.com. 300 IN A 216.239.115.143 ;; AUTHORITY SECTION: cnet.com. 86400 IN NS ns.cnet.com. cnet.com. 86400 IN NS ns2.cnet.com. cnet.com. 86400 IN NS ns3.cnet.com. ;; ADDITIONAL SECTION: ns.cnet.com. 86400 IN A 216.239.126.10 ns2.cnet.com. 86400 IN A 206.16.0.71 ns3.cnet.com. 86400 IN A 216.239.120.69 ;; Query time: 20 msec ;; SERVER: 216.239.126.10#53(ns.cnet.com) ;; WHEN: Thu Apr 7 07:58:51 2005 ;; MSG SIZE rcvd: 156 Yesterday (or the day before), it pointed at a different IP. I still think the only effective LART is a short message, and forward the problem email to the CNet editors (but maybe someone else can find a person at CNet to listen - I can't). Meanwhile, If they don't do something soon - I promise when I own cnet.com and zdnet.com, there will not be any redirectors:) Paul Shupak track(a)plectere.com

2 1

Re: [SURBL-Discuss] More spams with Zdnet redirector
by List Mail User 07 Apr '05

07 Apr '05

>From discuss-bounces(a)lists.surbl.org Wed Apr 6 01:34:26 2005 >Date: Wed, 6 Apr 2005 01:26:12 -0700 >From: Jeff Chan <jeffc(a)surbl.org> >X-Mailer: The Bat! (v1.62q) Personal >Organization: SURBL >X-Priority: 3 (Normal) >To: Raymond Dijkxhoorn <raymond(a)surbl.org> >Subject: Re: [SURBL-Discuss] More spams with Zdnet redirector >... >Cc: SURBL Discussion list <discuss(a)lists.surbl.org> >... > >Raymond, Paul and others, please LART them. > >We're not going to blacklist zdnet. > >Jeff C. > >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss > I spent over an hour today trying to speak to anyone on the editorial staff. I managed to leave two messages, and spoke to two people who were to "much" too busy to talk (they had been expecting other calls). The "Editor", Jeff Pelline, said if I sent him an email, he would "try" to get to it tomorrow; After, well over an hour - I gave up. They had moved buildings and disconnected their old telephone numbers about a year ago, so ten minutes later I "wdprs"'d and "rfci.whois"'d about 8 of their domains - that only took about 7 minutes of my time - now they can spend a few hours cleaning up and maybe then they will "have time" to talk (Note: they already had some listings for bouncing abuse@ & postmaster@ emails - seem they have a history of an overly aggressive "spam" filter" that bounces what appear to be innocuous messages - so I doubt you can discuss "spam" with them by email; And while they have cleared a few entries, they just ignore some of the others). I seriously doubt there is anyone to send a LART to (most of their domains bounce either abuse@, postmaster@ or both or even worse, show the accounts as being over-quota - i.e. nobody reads them). We'll see if the people I left messages for actually return my calls. I've given up on them - they are of the general apparent belief "my time is more valuable than yours". Someone else can burn a few hours on it. I like Raymond's rule - maybe I'll just block them outright - I don't get anything from them commonly, certainly not often (it has been many years since I found the news.com digests to have any value). Paul Shupak track(a)plectere.com P.S. The telephone numbers are "hidden", but anyone who wants to try is welcome: http://news.com.com/2040-1096_3-0.html?tag=ne.ft.si.con All their listed registration contact data is invalid (this is an Internet company)!? P.P.S. The sales department answered consistantly, but them transfered me into an endless hold pattern which seems to hang up after about ten minutes. P.P.P.S. The "Editor-at-large", Michael Kanellos, is the person who writes most often and most recently about spam, but his voice mailbox was full!

3 2

next redir?
by Alex Broens 07 Apr '05

07 Apr '05

Is this new? http://g.msn.com/0MNBUS00/1?http://www.true-offers.com/dip/ Alex

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss