On Friday, August 20, 2004, 3:10:21 AM, Joseph Burford wrote:
When the WS team get a moment they may like to have a look at why trafficMUNGEDzap.com and narMUNGEDod.ru are listed.
Saw them both in a legit mailing today, although they may not actually be legit in themselves :-)
Plain text http://www.ntjl.net/surbl/20040820-ws-fp.txt HTML http://www.ntjl.net/surbl/20040820-ws-fp.html
Of possible interest, sitepronews.com which runs the newsletter these occurred in is considered a professional ROKSO spam gang by SpamHaus:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL16577
Ref: SBL16577
206.51.224.0/20 is listed on the Spamhaus Block List (SBL)
23-May-2004 18:00 GMT | SR12
Brian Farrow / Yeshost / Hivelocity Ventures
206.51.224.0/20 is listed on the Register Of Known Spam Operations (ROKSO) database as being assigned to, under the control of, or providing service to a known professional spam operation run by Brian Farrow / Yeshost / Hivelocity Ventures.
[...]
Notes for hivelocity.net Abuse/Security
A listing in the ROKSO database means that this spammer has already been terminated by a minimum of 3 consecutive Internet networks for serious spam offenses. ROKSO spammers are professional spam gangs, they will use every trick in order to stop you from terminating them. Please do not allow your network to be a haven for ROKSO spammers, doing so puts your network in the position of "Knowingly providing Spam Support Service".
You had earlier brought to our attention sitepronews.com as a false positive. I wonder if you have any more information about them and why SpamHaus is perhaps incorrect in their judgements.
Jeff C.