[SURBL-Discuss] RFC: Storm URI IPs to XS list?

Phil (Medway Hosting) phil at medwayhosting.com
Sat Aug 18 15:37:43 CEST 2007

----- Original Message ----- 
From: "Jeff Chan" <jeffc at surbl.org>
To: "SURBL Discussion list" <discuss at lists.surbl.org>
Sent: Saturday, August 18, 2007 9:49 AM
Subject: [SURBL-Discuss] RFC: Storm URI IPs to XS list?

> As we know, the storm malware is responsible for a large number of
> computers in botnets, for DDOS, for e-card, PDF, and stock spams, etc.  A
> number of storm e-card-advertised URI IP addresses are available from the
> data source but are not currently being listed on XS.  (Those IPs, of
> are all or mostly bot-hosted web sites with malware loaders to further
> storm by compromising more computers and growing the botnets by infecting
> anyone who visits the sites.)
> Shall we:
> 1.  Blacklist those on XS
> 2.  Add XS into multi.surbl.org as the 128th bit

If it were put on the 128 bit, would that not mean SA rules would have to be
modified to use it ?

Many thanks



Website Hosting from only £5.00 per month.
www.medwayhosting.com - +44 (0)1634 856965

Digital & Traditional Printing, and much more
www.medwayprint.com - +44 (0)1634 281199

More information about the Discuss mailing list