On Saturday, October 16, 2004, 8:27:36 AM, Jeff Chan wrote:
On Saturday, October 16, 2004, 8:21:57 AM, Steven Champeon wrote:
on Sat, Oct 16, 2004 at 08:09:52AM -0700, Jeff Chan wrote:
On Saturday, October 16, 2004, 7:49:16 AM, Steven Champeon wrote:
on Fri, Oct 15, 2004 at 06:42:21PM -0700, Jeff Chan wrote:
On Friday, October 15, 2004, 8:24:27 AM, Alex Broens wrote:
>>/home/gorilla/black-gorilla-7_04.txt in nouse-white-jeffc-dmoz
medica.de= large German Medical Exhibition in Duesseldorf. Definitely not a spamhaus.
Can't imagine how these could get onto any list, other than a joe job or open subscription?
Please see my post WRT the "firstmlastzz" spammer. I know back in the day before I started distinguishing between blocking and tagging I'd throw the domains of any spam sender I saw into the blacklist. The list I sent Chris a few months ago was like that - full of ccTLD domains harvested from spam senders and HELOs - but I've since cleaned it up and started to distinguish between the badhelos and spammer domains.
Can you do a diff from an earlier version and get us a list to remove from the current data? It could help a lot. :-)
I've already sent this to Chris IIRC, but here's my 'badhelos' file - you should be able to use it as a FP test; most of the legit domains in it were passed as part of the firstmlastzz spamware's HELO or sender.
Thanks. Should we ask Chris to try to remove these from his 7/04 data?
Looks like he's taken them out:
$ join badhelos /home/gorilla/black-gorilla-7_04.txt $ join badhelos /home/gorilla/black-gorilla-8_04.txt hotvsnot.com BYE hotvsnot.com BYE rate-em.com BYE
However some of them appear in the prolocation and old Bill Stearns data:
/home/prolocation/black-prolocation-master in badhelos
blackpencils.com BYE dfhu876.com BYE emailgaul.com BYE ev24.net BYE happpymail.com BYE hideakifan.com BYE jjgfdk.com BYE kyokodate.com BYE ondagrupera.com BYE online--net.net BYE palmoffers.com BYE pinknewsletter.com BYE polkamail.com BYE profitablereport.com BYE real-coupons.com BYE safekidsbrowser.com BYE somefunspots.com BYE sunmail1.com BYE toutreporter.com BYE true-values.com BYE zz99zz.com BYE
/home/wstearns/black-wstearns-sa-blacklist.200406281446.domains in badhelos
212.com BYE 88998.com BYE aguascalientes.com BYE be3a.com BYE casino-rankings.com BYE datacds.net BYE deportista.com BYE dfhu876.com BYE dutchteenagers.com BYE e-ugm.com BYE elturista.com BYE formarriedcouples.com BYE freezing-my-butt-off.com BYE gamblerportal.com BYE gamblerspalace.com BYE head-in-the-clouds.com BYE i-love-blocker.com BYE i-love-qpr.com BYE jjgfdk.com BYE justkidding.biz BYE kinki-kids.com BYE mail15.com BYE mailru.com BYE miesto.sk BYE mms02.com BYE newageoptin.net BYE newfunpages.com BYE nilfen8.com BYE polkamail.com BYE profitablereport.com BYE quickinfo247.com BYE real-coupons.com BYE safekidsbrowser.com BYE sexyloupe.com BYE slamdunkfan.com BYE somefunspots.com BYE teeneyweeney.com BYE thefreesite.com BYE top--sites.com BYE tosser.com BYE true-values.com BYE tsd01.com BYE ugly-as-sin.com BYE whitesmoke.com BYE www--directory.net BYE your-days-are-numbered.com BYE yourpretty.info BYE zsf567.com BYE zz99zz.com BYE
Number of matches: 49
Raymond and Bill, is it possible you got some of these from Chris earlier? If so is it possible for you to remove this "bad hello" list as a source?
Jeff C. -- "If it appears in hams, then don't list it."