[SURBL-Discuss] FP?: ultimatebizsource.biz
Steven Champeon
schampeo at hesketh.com
Sat Oct 16 17:21:57 CEST 2004
on Sat, Oct 16, 2004 at 08:09:52AM -0700, Jeff Chan wrote:
> On Saturday, October 16, 2004, 7:49:16 AM, Steven Champeon wrote:
> > on Fri, Oct 15, 2004 at 06:42:21PM -0700, Jeff Chan wrote:
> >> On Friday, October 15, 2004, 8:24:27 AM, Alex Broens wrote:
> >>
> >> >>>/home/gorilla/black-gorilla-7_04.txt in nouse-white-jeffc-dmoz
> >>
> >> > medica.de= large German Medical Exhibition in Duesseldorf.
> >> > Definitely not a spamhaus.
>
> >> Can't imagine how these could get onto any list, other than
> >> a joe job or open subscription?
>
> > Please see my post WRT the "firstmlastzz" spammer. I know back in the
> > day before I started distinguishing between blocking and tagging I'd
> > throw the domains of any spam sender I saw into the blacklist. The list
> > I sent Chris a few months ago was like that - full of ccTLD domains
> > harvested from spam senders and HELOs - but I've since cleaned it up
> > and started to distinguish between the badhelos and spammer domains.
>
> Can you do a diff from an earlier version and get us a list to
> remove from the current data? It could help a lot. :-)
I've already sent this to Chris IIRC, but here's my 'badhelos' file -
you should be able to use it as a FP test; most of the legit domains in
it were passed as part of the firstmlastzz spamware's HELO or sender.
http://enemieslist.com/downloads/badhelos
--
join us! http://hesketh.com/about/careers/web_designer.html join us!
hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2554 w: http://hesketh.com
join us! http://hesketh.com/about/careers/account_manager.html join us!
More information about the Discuss
mailing list