Discuss

discuss@lists.surbl.org

2 participants
1873 discussions

fp mailscanner dot info
by Lindsay Snider 13 Jul '04

13 Jul '04

I noticed mailscanner dot info is in ws.surbl.org and I believe this to be incorrect. Do we have an alternate more automated way of dealing w/ false positives? Best Regards, Lindsay

1 0

RE: [SURBL-Discuss]
by Mailing List 13 Jul '04

13 Jul '04

Hi Raymond, 3 different systems (2 RH9 and 1 Fedora Core 1) Perl 5.8.0 on the RH9 boxes Perl 5.8.3 on the FC1 box URI is 1.31 SpamCopURI is 0.18 I initially followed instructions at http://www.fsl.com/support/index.html, using the latest URI. I had to install LWP::UserAgent, on my RH9 boxes it went well, but on my FC1 box it returns: Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------ ------- live/apache-listing.t 8 1 12.50% 5 Failed 1/41 test scripts, 97.56% okay. 1/761 subtests failed, 99.87% okay. make: *** [test] Error 255 /usr/bin/make test -- NOT OK Running make install make test had returned bad status, won't install without force Thanks Guy -----Original Message----- What version perl are you using? What OS? Whats the version of URI?

1 0

RE: [SURBL-Discuss]
by Mailing List 13 Jul '04

13 Jul '04

>From the install thru CPAN t/blacklist........ok t/dnsrbl...........ok t/extract_urls.....ok t/mailto...........ok t/open_redirect....NOK 1# Failed test (t/open_redirect.t at line 37) t/open_redirect....NOK 2# Failed test (t/open_redirect.t at line 44) # Failed test (t/open_redirect.t at line 52) t/open_redirect....ok 5/5# Looks like you failed 3 tests of 5. t/open_redirect....dubious Test returned status 3 (wstat 768, 0x300) DIED. FAILED tests 1-3 Failed 3/5 tests, 40.00% okay t/spamcopuri.......ok t/whitelist........ok Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------ ------- t/open_redirect.t 3 768 5 3 60.00% 1-3 Failed 1/7 test scripts, 85.71% okay. 3/57 subtests failed, 94.74% okay. make: *** [test_dynamic] Error 29 /usr/bin/make test -- NOT OK Running make install make test had returned bad status, won't install without force -----Original Message----- From: discuss-bounces(a)lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Raymond Dijkxhoorn Sent: Tuesday, July 13, 2004 08:04 To: SURBL Discussion list Subject: Re: [SURBL-Discuss] Hi! > t/open_redirect....NOK 2# Failed test (t/open_redirect.t at line 44) > t/open_redirect....NOK 3# Failed test (t/open_redirect.t at line 52) > t/open_redirect....ok 5/5# Looks like you failed 3 tests of 5. > t/open_redirect....dubious > Test returned status 3 (wstat 768, 0x300) > DIED. FAILED tests 1-3 > Failed 3/5 tests, 40.00% okay > t/spamcopuri.......ok > t/whitelist........ok > Failed Test Stat Wstat Total Fail Failed List of Failed > ------------------------------------------------------------------------ > ------- > t/open_redirect.t 3 768 5 3 60.00% 1-3 > Failed 1/7 test scripts, 85.71% okay. 3/57 subtests failed, 94.74% okay. > make: *** [test_dynamic] Error 29 Did you try to install via CPAN ? So it can try to get the dependencies ? perl -MCPAN -e shell install Mail::SpamAssassin::SpamCopURI Bye, Raymond. _______________________________________________ Discuss mailing list Discuss(a)lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss

2 1

by Mailing List 13 Jul '04

13 Jul '04

Got this output from the make test t/blacklist........ok t/dnsrbl...........ok t/extract_urls.....ok t/mailto...........ok t/open_redirect....NOK 1# Failed test (t/open_redirect.t at line 37) t/open_redirect....NOK 2# Failed test (t/open_redirect.t at line 44) t/open_redirect....NOK 3# Failed test (t/open_redirect.t at line 52) t/open_redirect....ok 5/5# Looks like you failed 3 tests of 5. t/open_redirect....dubious Test returned status 3 (wstat 768, 0x300) DIED. FAILED tests 1-3 Failed 3/5 tests, 40.00% okay t/spamcopuri.......ok t/whitelist........ok Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------ ------- t/open_redirect.t 3 768 5 3 60.00% 1-3 Failed 1/7 test scripts, 85.71% okay. 3/57 subtests failed, 94.74% okay. make: *** [test_dynamic] Error 29 Any pointers ? Kindest Regards

2 1

edu.tw whitelist?
by Chris Santerre 13 Jul '04

13 Jul '04

As discussed on a nother list. These edu.tw are notorious for not being secure and open proxies. However that isn't what we list. SO I'm suggesting edu.tw domains get added to whitelist. Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

2 2

msu.edu hell yeah!
by Chris Santerre 13 Jul '04

13 Jul '04

Just wanted to let you guys know that MSU is using surbl.org. We rock ;) Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but the one most responsive to change.' Charles Darwin

4 3

RE: [SURBL-Discuss] Re: Using (SU)RBL with a browser, any way to do it? (was <snip> )
by Chris Santerre 13 Jul '04

13 Jul '04

>-----Original Message----- >From: Nicolas Riendeau [mailto:knightr@istop.com] >Sent: Sunday, July 11, 2004 8:10 PM >To: William Stearns; SURBL Discussion list >Subject: [SURBL-Discuss] Re: Using (SU)RBL with a browser, any >way to do >it? (was <snip> ) > > >> Good morning, Nicolas, > >Hi William! > >> What's the problem with using a proxy? I have instructions at >> http://www.stearns.org/sa-blacklist/ on how to use the >sa-blacklist (the >> data underlying ws.surbl.org) in both squid and privoxy, using those >> proxies to block web access to the spammer web sites. >> Squid, at least, is available on both unix and windows (see >> http://www.cygwin.com). > >Thanks, I didn't know that... > >The fact that it works on Windows would take care of one of >the problems as the >number of *nix admins where I work is somewhat limited >compared to the number of >Windows admins... > >Only problem left now would be to convince them to invest in >the necessary hardware... > >> If you use a different proxy, I'd be glad to work with you to >> provide the sa-blacklist in a form suitable for that proxy. >> Cheers, >> - Bill > >Thanks! > >Nick > Or one could take the sa-blacklist file and turn it into a quick hosts file. I have a host file on the server that is copied to everyones machine everytime they log in. Full of spyware domains that simply point to 127.0.0.1 and It is easy for me to change. However squid also rocks. I have had a test server running for 1.5 years. I haven't had time to tweak it yet to go production yet. --Chris

2 1

Help: kid pron.....help report
by Chris Santerre 13 Jul '04

13 Jul '04

Good grief I have been going thru the domains submitted into SURBL and came up with a nasty kiddie pron site. Anyone here have contact with Secret Service or anyone else for that matter? I don't want the site just shutdown, I want these guys caught. *Warning, very disturbing site!* haydn.e-pid.org Address: 61.128.198.123 resolved to haydn.e-pid.org AS: 61.128.128.0/17 AS4134 [CN] Data Communications Bureau Beijing Net 61.128.128-255 CHINANET-CQ [CN] @ns.chinanet.cn.net --Chris

6 6

RE: [SURBL-Discuss] msu.edu hell yeah!
by Chris Santerre 12 Jul '04

12 Jul '04

>-----Original Message----- >From: William Stearns [mailto:wstearns@pobox.com] >Sent: Monday, July 12, 2004 11:18 AM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] msu.edu hell yeah! > > >Good morning, Chris, > >On Mon, 12 Jul 2004, Chris Santerre wrote: > >> Just wanted to let you guys know that MSU is using surbl.org. > > With Spamassassin, or with some other MTA/software combination? > >> We rock ;) > > I personally pebble, on a good day. :-) > Cheers, > - Bill :) With SA. --Chris

1 0

RE: First submission questions
by Chris Santerre 12 Jul '04

12 Jul '04

Hi Ryan, thanks for the submissions. I'm about to give them a quick going thru. The best place to ask these questions is right on the SURBL list discuss(a)lists.surbl.org I'm cc'ing this to the list. The more eyes on it the better. Redirects are handled differently. Post them to discussion list and they get added to a redirect list. The rule of thumb is like cooking: "When in doubt, throw it out." We would much rather not list a spammer, then list a shammer. Unless we decide together that the shammer is 95% spam with 1 legit customer. Then we might list them and inform the legit customer. Sometimes we don't all agree. Like political spam. Thats were we have some real fun ;) --Chris >-----Original Message----- >From: Ryan Thompson [mailto:ryan@sasknow.com] >Sent: Saturday, July 10, 2004 4:41 PM >To: Chris Santerre >Subject: First submission questions > > > >Hi Chris, > >I just submitted a "short list" of 87 domains to >chris+rthompson(a)moglobal.com, as kind of a proof-of-concept. I did take >quite a bit of care in the classification of these domains, so *I'm* >confident about them, but there are a few grey areas that I wasn't sure >if you'd agree with. Can you offer a bit of advice? > >Some I wasn't sure about are below. Also, if there's a person or list >that would be better equipped to advise on this kind of thing, please >let me know. I want to quickly become more help than burden, obviously. >:-) I'll be quieter once I better understand your inclusion system. > >Spam username hosts, but possibly also legit sites? I can't read >Taiwanese, nor do I really want to. In any case, these are >probably safe >for inclusion in English block lists. >twfc.org.tw Hosts spammers >club.net.tw Random hostname spammers >f2m.idv.tw Seems to process email forms for spammers >apol.com.tw mail.apol.com.tw seems to host /~spammers/ >pchome.com.tw Multiple NANAS mentions >netking.com.tw Multiple NANAS mentions > >Image hosts: >vendio.com eBay spammers image host; multiple NANAS >hinet.net has been mentioned before; they are rather notorious > >Obfuscated/invalid/mistyped URIs that get_uri_list picked up on: >interfun_lacing.jpg Local image URL >internet.e-mail Fake URL seen in spam >dnatzweirq2.ru Obfu for dazer2.ru >new_page_2.files Weird fake URL >wwwacronmedia.biz Mistyped spammer URL > >Iffy redirects: >tadpole.com Funny redirect destination in software spam? >61.218.32.78 Redirector; down now? >tadpolecomputer.com Funny redirect destination in software spam? > >- Ryan > >-- > Ryan Thompson <ryan(a)sasknow.com> > > SaskNow Technologies - http://www.sasknow.com > 901-1st Avenue North - Saskatoon, SK - S7K 1Y4 > > Tel: 306-664-3600 Fax: 306-244-7037 Saskatoon > Toll-Free: 877-727-5669 (877-SASKNOW) North America >

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss