[SURBL-Discuss] Submissions to SURBL list thru SARE website.

Steven Champeon schampeo at hesketh.com
Thu Jul 8 16:26:34 CEST 2004


on Thu, Jul 08, 2004 at 03:17:52PM -0400, Chris Santerre wrote:
> Good grief. Let me say this slowly....
> 
> SURBL is for domains in LINKS, URLS, websites, images, things you click on,
> images hosted in the email.
> 
> SURBL is NOT, will never be used, doesn't care, /dev/null's, any domain or
> IP the email came from. 

Well, I for one won't be sending any more domains along if I have to also
distinguish between the domains I happened to find in email bodies from
those I happened to find in message headers. Sorry. The overlap is far too
great, as for example in a recent message I got (summarized):

Received: from mx51.AfClawFrog1.us (mx51.afclawfrog1.us [216.162.182.51])
Subject: [Target-removed] Free Break-In & Fire Protection System
Message-ID: <wfbzwsbunaxhmuetqnef at mx51.AfClawFrog1.us>

[text part with a snippet of fictional text]

[html part containing several links to 

<a href="http://medium.AfClawFrog1.us?id=[snipped long hash id]

<img src="http://images.AfClawFrog1.us/images/HomeSecurityProfessionals2_r1_c1.gif
]

I ran a rDNS scan on the netblock and found another 40+ domains all of
the same type. As they are found in both the body and the message headers,
I want to be able to block all future mail rather than archiving it; which
I can do from sendmail. SURBL just lets me filter after acceptance.

Sorry, I don't have time to deal with the distinction. Because for me, for
the most part, there quite simply is no distinction.

-- 
hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2554 w: http://hesketh.com
Buy "Cascading Style Sheets: Separating Content from Presentation, 2/e" today!
http://www.amazon.com/exec/obidos/ASIN/159059231X/heskecominc-20/ref=nosim/


More information about the Discuss mailing list