[SURBL-Discuss] FP in WS & DS?

Bill Landry billl at pointshare.com
Tue Aug 24 15:53:24 CEST 2004


----- Original Message ----- 
From: "Alex Broens" <surbl at alexb.ch>

> Bill,
>
> Not every spammer HAS to be in a RBL...  every mail a spammer sends is
> legitimate.  (except for Chris_looking_for_car_keys )
>
> May I suggest you use http://openrbl.org for your lookups.
>
> eg: http://openrbl.org/ip/207/189/106/22.htm
>
> world looks a different colour there...

Maybe it's time to reevaluate your testing sources.  I have taken on the
challenge to manually test all of the RBLs that I know of that were listed
on the openrbl.org site that it claims have the US Bank IP address listed,
and none (NOT ONE) of them currently has the IP address listed:

[billl at mgw1 billl]$ dig 22.106.189.207.dnsbl.ahbl.org +short
[billl at mgw1 billl]$ dig 22.106.189.207.block.blars.org +short
[billl at mgw1 billl]$ dig 22.106.189.207.cbl.abuseat.org +short
[billl at mgw1 billl]$ dig 22.106.189.207.unconfirmed.dsbl.org +short
[billl at mgw1 billl]$ dig 22.106.189.207.blackholes.five-ten-sg.com +short
[billl at mgw1 billl]$ dig 22.106.189.207.blackholes.intersil.net +short
[billl at mgw1 billl]$ dig 22.106.189.207.dnsbl.njabl.org +short
[billl at mgw1 billl]$ dig 22.106.189.207.no-more-funn.moensted.dk +short
[billl at mgw1 billl]$ dig 22.106.189.207.relays.ordb.org +short
[billl at mgw1 billl]$ dig 22.106.189.207.psbl.surriel.com +short
[billl at mgw1 billl]$ dig 22.106.189.207.ipwhois.rfc-ignorant.org +short
[billl at mgw1 billl]$ dig 22.106.189.207.sbl.csma.biz +short
[billl at mgw1 billl]$ dig 22.106.189.207.dnsbl.sorbs.net +short
[billl at mgw1 billl]$ dig 22.106.189.207.blacklist.spambag.org +short
[billl at mgw1 billl]$ dig 22.106.189.207.bl.spamcop.net +short
[billl at mgw1 billl]$ dig 22.106.189.207.map.spam-rbl.com +short
[billl at mgw1 billl]$ dig 22.106.189.207.spews.dnsbl.net.au +short
[billl at mgw1 billl]$ dig 22.106.189.207.blackholes.uceb.org +short

> I got about 400 of those US bank legitimate messages all directed to
german
> speaking users,  among them 200 pupils of a hearing impaired school. Wanna
> tell ME they subscribed to that  #@*/$àöç

And you know for a fact that they did not subscribe to the newsletter?  I am
a US Back customer and I have never received their newsletter (and they
certainly have my e-mail address since I do online banking with them) until
just now, when I subscribed to it for testing purposes.

> my 2 cents

Worthless, unless you are willing to back it up with real data and real
results.

Bill



More information about the Discuss mailing list