[SURBL-Discuss] RE: First submission questions
Chris Santerre
csanterre at merchantsoverseas.com
Mon Jul 12 10:14:59 CEST 2004
Hi Ryan, thanks for the submissions. I'm about to give them a quick going
thru. The best place to ask these questions is right on the SURBL list
discuss at lists.surbl.org
I'm cc'ing this to the list. The more eyes on it the better. Redirects are
handled differently. Post them to discussion list and they get added to a
redirect list.
The rule of thumb is like cooking:
"When in doubt, throw it out."
We would much rather not list a spammer, then list a shammer. Unless we
decide together that the shammer is 95% spam with 1 legit customer. Then we
might list them and inform the legit customer.
Sometimes we don't all agree. Like political spam. Thats were we have some
real fun ;)
--Chris
>-----Original Message-----
>From: Ryan Thompson [mailto:ryan at sasknow.com]
>Sent: Saturday, July 10, 2004 4:41 PM
>To: Chris Santerre
>Subject: First submission questions
>
>
>
>Hi Chris,
>
>I just submitted a "short list" of 87 domains to
>chris+rthompson at moglobal.com, as kind of a proof-of-concept. I did take
>quite a bit of care in the classification of these domains, so *I'm*
>confident about them, but there are a few grey areas that I wasn't sure
>if you'd agree with. Can you offer a bit of advice?
>
>Some I wasn't sure about are below. Also, if there's a person or list
>that would be better equipped to advise on this kind of thing, please
>let me know. I want to quickly become more help than burden, obviously.
>:-) I'll be quieter once I better understand your inclusion system.
>
>Spam username hosts, but possibly also legit sites? I can't read
>Taiwanese, nor do I really want to. In any case, these are
>probably safe
>for inclusion in English block lists.
>twfc.org.tw Hosts spammers
>club.net.tw Random hostname spammers
>f2m.idv.tw Seems to process email forms for spammers
>apol.com.tw mail.apol.com.tw seems to host /~spammers/
>pchome.com.tw Multiple NANAS mentions
>netking.com.tw Multiple NANAS mentions
>
>Image hosts:
>vendio.com eBay spammers image host; multiple NANAS
>hinet.net has been mentioned before; they are rather notorious
>
>Obfuscated/invalid/mistyped URIs that get_uri_list picked up on:
>interfun_lacing.jpg Local image URL
>internet.e-mail Fake URL seen in spam
>dnatzweirq2.ru Obfu for dazer2.ru
>new_page_2.files Weird fake URL
>wwwacronmedia.biz Mistyped spammer URL
>
>Iffy redirects:
>tadpole.com Funny redirect destination in software spam?
>61.218.32.78 Redirector; down now?
>tadpolecomputer.com Funny redirect destination in software spam?
>
>- Ryan
>
>--
> Ryan Thompson <ryan at sasknow.com>
>
> SaskNow Technologies - http://www.sasknow.com
> 901-1st Avenue North - Saskatoon, SK - S7K 1Y4
>
> Tel: 306-664-3600 Fax: 306-244-7037 Saskatoon
> Toll-Free: 877-727-5669 (877-SASKNOW) North America
>
More information about the Discuss
mailing list