OK. Here's my recommendations on the 1-f bunch, assuming these did hit real ham. Descriptions preceded by FP indicate domains that are listed in multi.surbl.org (in the FP list generated by geturi). I don't think I missed any.
123inkjets.com 158 NANAS reports that look spammy as hell, but they've been around for years. Good greylist candidate?
1and1.com 1and1 Internet. Most NANAS reports are just nameserver hits. Definitely legit users.
1sound.com Can't resolve domain, but no real NANAS hits, and has been registered for 4+ years. Domain servers appear to be unresponsive.
4d.com Registered in '93, CAD software package
8k.com FP: Free web space
aaronsw.com JM knows
activatormail.com FP: Looks white-hat to me; 4+ years of email service, looks like users sometimes spam. Should not be listed in SURBL.
agnitum.com FP: 4+ years; make firewall software. NANAS hits look bogus. No way this should be listed in SURBL.
aladdinsys.com On the net since '94; they make compression software
amnesty-volunteer.org The domain is 2517 days old, and looks like the site isn't much younger. :-) More importantly, no NANAS hits, and they look rather legit.
ampcast.com atstake.com barebones.com commonwealthclub.org conceptdraw.com crime-research.org ctsg.com design-tools.com drbott.com drivesavers.com These all look legit to me, no damning NANAS reports, and domains registered for > 2 years. I couldn't find any evidence of spam for any of them.
bbspot.com FP: One of my favourite sites. :-) More importantly, they don't spam. Whitelist.
classesusa.com One NANAS example, possibly forged. Maybe not whitelist. Registered for 4+ years.
clearcredit.com FP: Many NANAS examples, but all are over a year old. The site has a new owner as of March 2004. I'd say de-list and see what happens.
drorshalev.com Looks like a personal site, and it's been registered since last year and I couldn't find any evidence of spamming.
duckland.com Personal site, no NANAS, around for years
ecsirt.net Doesn't resolve; no nameservers. Also, no NANAS. Reg'd in 2002
fetchsoftworks.com Looks legit enough to me
fipr.org Old and well-known organization; no history of spam
firewiredirect.com One NANAS hit that was probably someone who forgot they subscribed to the newsletter. :-)
forest.net Hosting and co-location. Definitely legit.
So, to summarize, all of these should at *least* be de-listed, and, with a few exceptions, they're all potential whitelist candidates.
- Ryan
Jeff Chan wrote to SURBL Discussion list:
On Monday, September 6, 2004, 9:03:33 PM, Joseph Burford wrote:
Given the type of source messages and some spot checking, I'm inclined to whitelist them all, but I'd like to ask for some help checking them first. Can anyone help check these?
I can do S - Z if that's of help?
Regards,
Joseph
Thanks, we could definitely use the help. Ryan would you like to split the remainder with me?
FWIW there were another 65 or so domains I extracted from Theo's hams that I did not include in that FP list because they were already in whitelists. In other words they probably would have been non-hits, unless they were whitelisted recently.
Jeff C.
Discuss mailing list Discuss@lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss