----- Original Message ----- From: "Jeff Chan" jeffc@surbl.org To: "SURBL Discussion list" discuss@lists.surbl.org Sent: Saturday, August 18, 2007 9:49 AM Subject: [SURBL-Discuss] RFC: Storm URI IPs to XS list?
As we know, the storm malware is responsible for a large number of
compromised
computers in botnets, for DDOS, for e-card, PDF, and stock spams, etc. A
large
number of storm e-card-advertised URI IP addresses are available from the
XS
data source but are not currently being listed on XS. (Those IPs, of
course
are all or mostly bot-hosted web sites with malware loaders to further
spread
storm by compromising more computers and growing the botnets by infecting anyone who visits the sites.)
Shall we:
- Blacklist those on XS
- Add XS into multi.surbl.org as the 128th bit
If it were put on the 128 bit, would that not mean SA rules would have to be modified to use it ?
Many thanks
Phil
_____________________________________________
Website Hosting from only £5.00 per month. www.medwayhosting.com - +44 (0)1634 856965 _____________________________________________
Digital & Traditional Printing, and much more www.medwayprint.com - +44 (0)1634 281199 _____________________________________________