[SURBL-Discuss] Re: embedded image spams

[Jeff Chan]

On Saturday, May 28, 2005, 7:35:05 AM, Sean Sowell wrote:

> Rakesh Pal wrote:
>> I have been bugged a lot by embedded image spams recently, although some
>> of these spams got trapped due URI checks, some managed to pass as well
>> as the url wasn't yet blocked in the SURBLs.

> and Jeff Chan wrote:
>> Please provide the URI and the timestamp it was first seen.
>> We can use that information to see if we can get them into SURBLs
>> sooner.

> Hello ---

> I've been diligently sending full message sources of similar spam to
> submit.[code]@spam.spamcop.net these past several days.  My account there is
> set up as a mole to minimze the chance of being joe-jobbed.  My
> understanding is that spamcop adds a point for that URI in spamcop's
> database, until it exceeds the threshold needed for inclusion in sc.surbl.
> Then, by way of the URIBL_SC_SURBL rule in SA 3.0.3, more of these things
> will be caught as spam, since SA assigns >= 3.8 points to each such spam.
> Am new to these tools, so I hope I've understood the docs and faq pages
> correctly ...

> Jeff, I can send you a zip file with a bunch of these recent message sources
> (my email client is OE6).  Or, do you just need a bunch of Date: /
> Message-ID: / Content-ID: triplets?

If you can post or send the timestamp of the message and the URI
domain of it, that would be great.

Jeff C.
--
Don't harm innocent bystanders.