Kelly,

There is a long (2-3 paragraph) answer for the general question "Why are subdomains not blacklisted?", but the short answer is that it is the responsibility of the program or spam filter making use of SURBL to remove the extra levels and check "kennevur.com" against SURBL instead of "uztiuqhcsgdnhsx.kennevur.com"

In this situation, a good filter will not bother checking the longer version but would know to extract just the domain name for checking.

Rob McEwen PowerView Systems rob@PowerViewSystems.com (478) 475-9032

-----Original message----- From: "Kelly Jones" kelly.terry.jones@gmail.com Date: Thu, 23 Nov 2006 17:43:09 -0500 To: discuss@lists.surbl.org Subject: [SURBL-Discuss] Why are subdomains not blacklisted?

I received two separate spams advertising "uztiuqhcsgdnhsx.kennevur.com" and "678.com.plaweresoft.com" as the domains.

multi.surbl.org lists the domains as blacklisted:

...

host kennevur.com.multi.surbl.org

kennevur.com.multi.surbl.org has address 127.0.0.86

...

host plaweresoft.com.multi.surbl.org

plaweresoft.com.multi.surbl.org has address 127.0.0.118

but not the subdomains:

...

host uztiuqhcsgdnhsx.kennevur.com.multi.surbl.org

Host uztiuqhcsgdnhsx.kennevur.com.multi.surbl.org not found: 3(NXDOMAIN)

...

host 678.com.plaweresoft.com.multi.surbl.org

Host 678.com.plaweresoft.com.multi.surbl.org not found: 3(NXDOMAIN)

Why? Wouldn't it be easy/sensible to wildcard the blacklist to include these? _______________________________________________ Discuss mailing list Discuss@lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss