Discuss

discuss@lists.surbl.org

1867 discussions

Rookie Question
by Kevin A. McGrail 03 Jan '05

03 Jan '05

OK. It's a silly question but I'd like to start submitting more of the SPAM I hand-filter for inclusion in the SURBL lists. For example, I'm being inundated with offers for free watches linking to http://*.nepel-MUNGED.com/ which redirects to http://www.online-replica-store-MUNGED.com/. What is the best process for me to take a known SPAM and get the ball rolling on something like this? Regards, KAM

7 21

DoS Question
by Kevin A. McGrail 01 Jan '05

01 Jan '05

> This isnt something to discuss on the SURBL list, but it looks like you > either have a dictionary attack going on. I'm sorry. I should clarify on list (though I do appreciate the offer of off-list support) All of these connections do not seem to proceed past the connection startup phase. I am very used to dictionary attacks having hosted sites and DNS that bring ire from Spammers (formerly www.spamassassin.org and currently just DNS, an SURBL public nameserver, RelayRegistry.org, … [View More]

3 3

DoS Question
by Kevin A. McGrail 01 Jan '05

01 Jan '05

Anyone else seeing massive sendmail connections seemingly for the sole purpose of a denial of service? This is less than one minute or two after a sendmail restart and we've been seeing this issue since app 6AM today. Regards, KAM 15991 ? S 0:00 sendmail: accepting connections 16001 ? S 0:00 sendmail: Queue runner@00:05:00 for /var/spool/clientmqueue 16003 ? S 0:00 sendmail: server localhost.localdomain [127.0.0.1] startup 16011 ? S 0:00 … [View More]

2 1

help checking domain please
by Chris Santerre 30 Dec '04

30 Dec '04

OK, I have a hunch it may be spam. It was submitted to SURBL and it pretty much looks like spam, But hard to tell. Anyone help me out? http://www.ijting.com/index.asp?partner=dora Chris Santerre System Admin and SARE/SURBL Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin -- No virus found in this outgoing message. Checked by AVG Anti-Virus. … [View More]

3 4

RE: [SURBL-Discuss] Proflowers again, was: Send Holiday Flowers f or $24.99 plus Beautiful Glass Vase from Proflowers (fwd)
by Chris Santerre 30 Dec '04

30 Dec '04

>>> We've seen piles of spam promoting proflowers.com in the >past two days, >>> all containing asandox.com uris and arriving via an >asandox.com relay. >>> IMO asando.com (http://www.spamhaus.org/sbl/sbl.lasso?query=SBL20781) is >> the uri that should be blocked, not proflowers.com. > > Thank you. That is exactly the right way to reason things. > If asando_ is the actual spamming affiliate or whatever, > then they should be the ones to … [View More]

2 1

RE: [SURBL-Discuss] Zone File Rsync Server?
by Chris Santerre 29 Dec '04

29 Dec '04

>-----Original Message----- >From: Raymond Dijkxhoorn [mailto:raymond@prolocation.net] >Sent: Tuesday, December 28, 2004 1:35 PM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] Zone File Rsync Server? > > >Hi! > >> I have to get an ACL setup on the firewall that allows rsync >only to the >> surbl rsync server(s). I have not been able to find >documented anywhere >> what I/P's or server names to use. Can someone point me to >a … [View More]

1 0

Zone File Rsync Server?
by Johnson, Robert F 28 Dec '04

28 Dec '04

I have to get an ACL setup on the firewall that allows rsync only to the surbl rsync server(s). I have not been able to find documented anywhere what I/P's or server names to use. Can someone point me to a document that provides this information? I would want to rsync multi (hope this request makes sense :-)) Thanks for any help you can provide.

3 2

Proflowers again, was: Send Holiday Flowers for $24.99 plus Beautiful Glass Vase from Proflowers (fwd)
by William Stearns 24 Dec '04

24 Dec '04

Good afternoon, all, We discussed proflowers earlier this year. To quote Jeff: > It also seems they're at least trying to cut back on spamming if we > accept the decrease in recent NANAS sightings. I just received 4 more spams from them, one attached. Perhaps they just get quiet between holidays? I'd like to place one vote for blacklisting them. Opinions? Cheers, - Bill --------------------------------------------------------------------------- "What is the most … [View More]

5 8

RE: [SURBL-Discuss] phishing attempt
by Matthew Wilson 24 Dec '04

24 Dec '04

Jeff, I don't know if you ever got access to anti-phishing's phish archive; but if you didn't, you might put up a donation link on your site and solicit contributions that would specifically go toward paying for access to their database, for at least 1 year. Of course, if their database isn't updated as quickly as yours or isn't helpful for the first year, then you obviously wouldn't continue it... Just an idea... Matthew Wilson

2 1

phishing attempt
by Mariano Absatz 24 Dec '04

24 Dec '04

Hi David et al. Just got this phishing attempt referencing: http://211.235.248.74:280/index.php?Ihwt=NBKFdEjFBJRXqkQblivPGRDGUPJEYgMMTy… Cc-ing SURBL just FYI. The complete message is at the bottom. -- Mariano Absatz - El Baby el (dot) baby (AT) gmail (dot) com el (punto) baby (ARROBA:@) gmail (punto) com Received: from louiskoo.com ([219.251.237.182]) by prxy6.uba.ar (8.12.10/8.12.10) with ESMTP id iBNB6ZEc035962 for <baby(a)ccc.uba.ar>; Thu, 23 Dec 2004 08:06:… [View More]

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss