Discuss

discuss@lists.surbl.org

1862 discussions

URL shortener abuse data
by Ron Guerin 21 Dec '09

21 Dec '09

As I've mentioned here before, I write an open source URL shortening service. I also operate one publicly since that was the only way I was ever going to get useful real world data to work with. To look at the code though, you'd think I run an anti-abuse system that also shortens URLs. So goes the Internet I guess. While I have a tiny number of users relative to any URL shortening service you've ever heard of, a couple of thousand people have downloaded the software, and I'm aware of a couple of dozen public installations. Between all the ones that may be out there, we might just produce enough abuse data to make it worth someone's while to use it. As I'm about to do a lot of work on the software in preparation for a new release, I'd like to get anyone's thoughts about the following: 1. Interest: Is anyone interested in using URI abuse data produced by URL shorteners? 2. Ideal way to supply the data: I'd rather supply it to SURBL or some other well-run URI BL for inclusion in an existing URI BL service than operate one for this purpose. I'm looking to use anything that remotely resembles standards for everyone's sake, rather than re-invent the wheel. 3. Trust/Reputation: I've discovered on a couple of occasions that I'd been using on my mail server abuse data from shoddily run operations, and frankly this is much much worse than getting some spam. I don't intend to be Yet Another Irresponsible BL Operator running an absentee automated blocklist data source. Yet, in order to have enough data to be worth sending somewhere, I'm going to need to accept input from my users, both of the service, and of the source code. I plan on doing something similar to Craigslist whereby people can report abuse from the web site and a certain number of complaints will disable the redirection. As for my source code users, I think I need some kind of reputation system. Any thoughts about this would be appreciated. - Ron

2 1

Re: [SURBL-Discuss] [SURBL-Announce] Most Abused TLDs report added
by Kris Deugau 03 Nov '09

03 Nov '09

SURBL Announcement list [READONLY] wrote: > SURBL has added a report of Most Abused TLDs. This is a daily count of > the TLDs most commonly appearing in SURBL data and is an indication of > relative abuse levels. > > http://www.surbl.org/tld-subtotals.head Some interesting numbers, but what might be more interesting is to see the *percentage* of domains in each TLD - .com domains may be highest on the list, but I suspect there are far more .com domains overall as well, and the percentage of abused .net and .info domains is much closer to the .com (possibly higher). -kgd

2 1

I seem to have been blacklisted for a few hours
by Steven W. Orr 15 Oct '09

15 Oct '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Now it seems to be fixed before I could even finish writing the request to be removed from the blacklist. I was in [[SURBL Lookup Result: syslang.net is on SURBL lists: WS Back to SURBL Lookup Page ]] Do I get to find out why I was blacklisted? I'm one of the good guys, but I suppose all the badguys say that too. Seriously, am I entitled to an answer? This is the first time it has happened and I've been running for over 10 years. It's a non-commercial community opt-in mailinglist. There's a wiki with recommendations for local services by the registered members of the list. And I do apologise if this is a frequent question, but I saw no way to get this answer myself. TIA - -- Time flies like the wind. Fruit flies like a banana. Stranger things have .0. happened but none stranger than this. Does your driver's license say Organ ..0 Donor?Black holes are where God divided by zero. Listen to me! We are all- 000 individuals! What if this weren't a hypothetical question? steveo at syslang.net steven orr -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkrXXQ4ACgkQRIVy4fC+NySZmgCfWVLkMCcmcThVE45mpmT742/E uuAAnAp7J7nz4Ze3ZWTDMA8A4ORTvAJH =kBNZ -----END PGP SIGNATURE-----

1 0

What is "1.name" ?
by GRIFFIN Paul 17 Sep '09

17 Sep '09

Hi As you'll probably gather quite quickly, I'm new to this mailing list so please forgive any faux pas's on my part. The company I work for are getting e-mails blocked because they contain a url listed on surbl. Which is fine, except the url it is referencing is "1.name"...?? I thought this was initially some refenence in our software but it appears the name "1.name" is actually blacklisted on surbl (if you type it in Lookup it gives a positive response). There is no DNS reference for this as far as I can see. I am quite likely being stupid here but, can anyone please enlighten me as to how or why this is on the surlbl list...? Thanks Paul **************************************************************** The operating companies affiliated with Atradius N.V. (Atradius Group) conduct insurance, debt collection and information services business through their registered (branch) offices in many countries. For information about the main registration details of Atradius Group offices in your country please visit http://global.atradius.com/general-content/legal/legallist.html IMPORTANT NOTICE. This e-mail, including any and all attachments, is intended for the addressee or its representative only. It is confidential and may be under legal privilege. Any form of unauthorised use, publication, reproduction, copying or disclosure of the content of this e-mail is not permitted. If you are not the intended recipient of this e-mail and its contents, please notify the sender immediately by reply e-mail and delete this e-mail and all its attachments subsequently. Although this e-mail and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and/or opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by Atradius Group companies, either jointly or severally, for any loss or damage arising in any way from its use. E-mail received by Atradius Group can be stored for business purposes. ****************************************

2 2

False blacklist for my domain
by Alan Greene 03 Sep '09

03 Sep '09

I just created a new domain, hosted on arvixe, and have never even set up mail on the site. Now, I created a website on the domain and when I tried to send the link to my testers, my email was returned, saying my domain was blacklisted. This is ridiculous. It's a brand new site WITHOUT mail. Now, surbl wants me submit a request to remove it, using an email with my domain, but I DON"T EVEN HAVE AN EMAIL ADDRESS at that domain. Great, thanks for messing with my life, SURBL. Who are you and what gives you the right to do this?

2 1

bit.ly url
by Steven Wetzel 23 Aug '09

23 Aug '09

my bit.ly url on my tweets at Twitter is being flagged as possible spam. How do I correct this? I "looked up" my link http://twitteronlinesystem.com/go.php?offer=dreamcat1&pid=1 on SURBL and it said "Not Blacklisted" OK so what's up?

2 1

Re: [SURBL-Discuss] Other SURBL lists then from surbl.org?
by Eric McClatchie 20 Aug '09

20 Aug '09

I am having emails ending up not delivered whenever a certain domain URL is in the email. When I check surbl.org lists, the domain is NOT blacklisted. What other lists should I be looking at? I also notice when subscribing to this list, the approval email went to spam on gmail! Mac

4 4

Re: [SURBL-Discuss] Notification of Blacklist Status
by Steve Sobol 04 Jul '09

04 Jul '09

Maybe instead of having an attitude, you should understand that you're exposing your organization to a lot of liability by not fixing your problem, if in fact you haven't fixed it yet. If you haven't fixed it yet, you need to stop whining on this mailing list, and go fix it ASAP. If you're avoiding the questions posed to you earlier in this thread, I imagine that you *haven't* fixed anything yet. Break-ins happen. But if you don't fix the damage, you could be opening yourself up for civil damages or criminal charges (I'm not a lawyer, and I am not familiar with Canadian law; I'm assuming things up there work in a similar manner to the way they work in the US). This is *not* a threat. I have no intention of pursuing legal action against you. I'm just stating the cold, hard facts. -- Steve Sobol, Victorville, CA sjsobol(a)JustThe.net

2 3

Notification of Blacklist Status
by Petros Kolyvas 04 Jul '09

04 Jul '09

Dear All, I was notified today via an error message from a mail server that a domain/URL in the e-mail was on a blacklist somewhere. I took the time to check and sure enough our own domain is on that list with the note PH. The problem is that our domain is hosted on a shared web host from what I believe to be a fairly reputable web host here in Montreal (iWeb.com.) We have no ability to control or monitor the servers at a level that would allow us to work on, modify, patch, or make any low- level changes that requested in the "Removal Request." More importantly is why a domain isn't notified upon being blacklisted? (Via the info@... or abuse@.... mailboxes) I can understand the need for immediately blacklisting troublesome domains; with that I have no qualms. However it seems that, in the hope of weeding out false positives like our own, at least a note that the domain is being added to the blacklist would help in some kind of active response - instead of the reactive one where we start receiving cryptic messages from clients' servers indicating something is amiss. That being said, thanks for all your hard work to keep this giant and messy infrastructure as clean as humanly possible. Be well, Petros Kolyvas -- ShiftFocus Media for Arts and Education Phone: 514.667-9778 ext. 231 Fax: 866.850.5451 42 Milner Street Montreal, QC, H4X 2H5

3 14

Re: [SURBL-Discuss] How long does your removal process take?
by Heather Nagey 15 Jun '09

15 Jun '09

Thank you very much for your intervention. I was beginning to despair... Our customers will appreciate being able to get their mail! Regards, Heather On 13 Jun 2009, at 11:00, discuss-request(a)lists.surbl.org wrote: > Your domains are no longer blacklisted. Heather Nagey Customer Services Manager Runtime Revolution Ltd http://www.runrev.com

2 1

← Newer
1
...
5
6
7
8
9
10
11
...
187
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss