[SURBL-Discuss] BigEvil + MidEvil as SURBL

[Jeff Chan]

On Wednesday, April 21, 2004, 11:25:32 PM, John Wilcock wrote:
> On Wed, 21 Apr 2004 14:49:51 -0700, Jeff Chan wrote:
>> >> > 1) BigEvil wildcards. Not sure how you would handle these. 
>> >> Something like
>> >> > evil\d{2,4}spam\.com is a general wildcard. Some of those 
>> >> domains don't even
>> >> > exhist. Not sure how SURBL will handle that.
>> >> 
>> >> Yes, I should have mentioned that I'm simply discarding them.
>> >> Unfortunately there's no easy way to deal with them.  Domains
>> >> without any patterns in them, which are a majority, come right
>> >> through.  The script is at:
>> 
>> > Can we make sure that when you announce this to the public that they know
>> > this! :) 
>> > I can see the flurry of emails now. 
>> 
>> Definitely will mention the differences in the announcement and
>> web site!

> Perhaps the ideal would be if the script that converts bigevil to rbl
> form could also generate a separate "wildevil" cf file containing only
> the wildcard entries from bigevil, so that people can have the best of
> both worlds...

That's an interesting idea.  I'd need to investigate how
reversible the transforms are however.  Note that the number of
wildcarded base domains discarded is currently 2%.

Jeff C.