[SURBL-Discuss] Re: Was: List of spamvertised sites sent via zombies, open proxies, etc.?

Raymond Dijkxhoorn raymond at surbl.org
Sun Mar 13 16:31:01 CET 2005


Hi!

>> Spamtraps are bad news if you use them 1:1, you need to parse out a LOT,
>> did you run poluted spamtraps? I have been running two proxypots, i still
>> might have some tars, and most of it was really useless. What more helps
>> is a wider coverage. I rather see some automated system like spamcop
>> setup, so people can report, and we auto parse it with Joe's tool for
>> example. With a larger footprint we also get spam earlier. Its not like
>> they first send to the spamtraps and then to 'real'users alone.

>> I understand you want to cover new area's but please dont rely on other
>> RBL's too much, i think waiting with own checks does much more in the end.
>> IF SBL picks it up we can pick it up faster. But we also want to pickup
>> ones NOT listed by any RBL do we ?

> I think you're not understanding what I'm asking for.  :-)
>
> I'm not asking for trap data.  I'm asking to look for XBL hits,
> then take the URIs from messages that hit XBL.  In other words
> I want to get the sites that are being advertised through
> exploited hosts.
>
> Nothing to do with traps or SBL.  ;-)

If you can get a feed, why limit this to hosts found inside XBL?

Bye,
Raymond.


More information about the Discuss mailing list