[SURBL-Discuss] RFC: Storm URI IPs to XS list?

[Phil (Medway Hosting)]

----- Original Message ----- 
From: "Jeff Chan" <jeffc at surbl.org>
To: "SURBL Discussion list" <discuss at lists.surbl.org>
Sent: Saturday, August 18, 2007 9:49 AM
Subject: [SURBL-Discuss] RFC: Storm URI IPs to XS list?


>
>
> As we know, the storm malware is responsible for a large number of
compromised
> computers in botnets, for DDOS, for e-card, PDF, and stock spams, etc.  A
large
> number of storm e-card-advertised URI IP addresses are available from the
XS
> data source but are not currently being listed on XS.  (Those IPs, of
course
> are all or mostly bot-hosted web sites with malware loaders to further
spread
> storm by compromising more computers and growing the botnets by infecting
> anyone who visits the sites.)
>
> Shall we:
>
> 1.  Blacklist those on XS
> 2.  Add XS into multi.surbl.org as the 128th bit

If it were put on the 128 bit, would that not mean SA rules would have to be
modified to use it ?

Many thanks

Phil


_____________________________________________

Website Hosting from only £5.00 per month.
www.medwayhosting.com - +44 (0)1634 856965
_____________________________________________

Digital & Traditional Printing, and much more
www.medwayprint.com - +44 (0)1634 281199
_____________________________________________