Discuss

discuss@lists.surbl.org

2 participants
1873 discussions

FP in PH and AB SURBL - www.4emi.com
by Russ Ringer 17 Oct '06

17 Oct '06

www.4emi.com is coming up as listed in PH and AB SURBL. EMI Solutions is a legitimate supplier we use in manufacturing aircraft electronics and should not be listed in either PH or AB. Funny thing is I can't find the listing on abusebutler or castlecops. This server is running SpamAssassin version 3.0.3

2 2

Google toolbar's whitelist
by jm＠jmason.org 10 Oct '06

10 Oct '06

I'm sure someone will find this useful: http://sb.google.com/safebrowsing/update?version=goog-white-domain:1:-1 found via http://blog.outer-court.com/forum/67024.html , --j.

1 0

Re: [SURBL-Discuss] Logo competition
by Jeff Chan 04 Oct '06

04 Oct '06

On Thursday, August 17, 2006, 9:12:51 PM, Steve Sobol wrote: > Jeff Chan wrote: >>> http://stevesobol.com/content/surbllogo.jpg >> >>> This is just a preliminary, I-did-this-in-five-minutes concept. >> >> It's good. (Red circle and slash = "no" and url://) >> >> Can you make one with spam:// ? > Absolutely not, but see > http://stevesobol.com/content/surbllogo2.jpg > (Ok, I was just kidding, of course I can do it!) > If that looks OK to you, I'll take that concept and come up > with a final product. Hi Steve, Looks great; thanks much! If I could request a modification, it would be for bolder type and thicker lines if possible. Also I'd probably make the text black, as in blackhat. Cheers, Jeff C. -- Don't harm innocent bystanders.

2 1

Yahoo redirector?
by Joseph Brennan 03 Oct '06

03 Oct '06

What's going on here? Numerous examples of porn spam sent Sunday have all different hostnames that resolve to the same few IP addresses, apparently by round robin: $ host takinoivanober.com takinoivanober.com has address 68.142.212.127 takinoivanober.com has address 68.142.212.128 takinoivanober.com has address 68.142.212.129 takinoivanober.com has address 68.142.212.130 takinoivanober.com has address 68.142.212.135 takinoivanober.com has address 68.142.212.126 $ host zascehjukalsderr.com zascehjukalsderr.com has address 68.142.212.130 zascehjukalsderr.com has address 68.142.212.135 zascehjukalsderr.com has address 68.142.212.126 zascehjukalsderr.com has address 68.142.212.127 zascehjukalsderr.com has address 68.142.212.128 zascehjukalsderr.com has address 68.142.212.129 $ host sex368yzx.com sex368yzx.com has address 68.142.212.129 sex368yzx.com has address 68.142.212.130 sex368yzx.com has address 68.142.212.135 sex368yzx.com has address 68.142.212.136 sex368yzx.com has address 68.142.212.137 sex368yzx.com has address 68.142.212.128 Reverse DNS resolves to Yahoo, only: $ host 68.142.212.130 130.212.142.68.in-addr.arpa domain name pointer p10w14.geo.mud.yahoo.com. $ host 68.142.212.127 127.212.142.68.in-addr.arpa domain name pointer p10w11.geo.mud.yahoo.com. $ host 68.142.212.128 128.212.142.68.in-addr.arpa domain name pointer p10w12.geo.mud.yahoo.com. The range 68.142.192 through 68.142.255 is all Inktomi, contact address network-abuse(a)cc.yahoo-inc.com, so it really is Yahoo. The interesting bit is that connecting by IP address or yahoo hostname gets a "Error 400 - Bad Request", but connecting by the spammer hostname gets a web page. I'd be especially interested in a generalized way of catching this. Joseph Brennan Columbia University Information Technology

4 5

Re: [SURBL-Discuss] Exim / SURBL
by Robert Temple 30 Sep '06

30 Sep '06

> > On 29/09/06, Jeff Chan <jeffc(a)surbl.org> wrote: > > On Friday, September 29, 2006, 8:18:33 AM, Peter Bowyer wrote: > > > On 29/09/06, Robert Temple <rtscruiser(a)gmail.com> wrote: > > >> Sorry for the newbie quesiton. I did more research on the SURBL site > and > > >> found out you can't use it as a stand alone app. Re-enabled > Spamassassin :( > > >> and now it is working perfectly. > > > > > Robert > > > > > I believe you mentioned you were using Exim - there is a method of > > > directly integrating URIBL/SURBL - which is (actively) maintained by > > > Erik Mugele. > > > > > http://www.teuton.org/~ejm/exim_surbl/ > > > > > Peter > > > > Hi Peter, > > The site Robert mentioned: > > > > http://forums.ev1servers.net/showthread.php?t=57896 > > > > is about using Erik Mugele's perl program (with Exim?) in the ev1 > > Ah, sorry - came in part-way through. Erik's method is a very > effective way of integration with Exim, I hope Robert might give it > another try. The exim-users list will support him if he needs it. > > Peter > > -- > Peter Bowyer > Email: peter(a)bowyer.org So it IS possible to use SURBL without Spamassassin? That would be awesome. I'll check out the exim site for their users discussion list. Thanks!

1 0

Re: [SURBL-Discuss] Exim / SURBL (Was: Re: Discuss Digest, Vol 30, Issue 12)
by Peter Bowyer 29 Sep '06

29 Sep '06

On 29/09/06, Robert Temple <rtscruiser(a)gmail.com> wrote: > Sorry for the newbie quesiton. I did more research on the SURBL site and > found out you can't use it as a stand alone app. Re-enabled Spamassassin :( > and now it is working perfectly. Robert I believe you mentioned you were using Exim - there is a method of directly integrating URIBL/SURBL - which is (actively) maintained by Erik Mugele. http://www.teuton.org/~ejm/exim_surbl/ Peter -- Peter Bowyer Email: peter(a)bowyer.org

2 2

Re: Discuss Digest, Vol 30, Issue 12
by Robert Temple 29 Sep '06

29 Sep '06

Sorry for the newbie quesiton. I did more research on the SURBL site and found out you can't use it as a stand alone app. Re-enabled Spamassassin :( and now it is working perfectly. > > > Hello; > > > > I wanted to replace Spamassassin on my server, so I've set up SURBL > using > > instructions from a forum on my server companies site (here: http:/ > > /forums.ev1servers.net/showthread.php?t=57896) > > > > The installation seemed to go well, but I haven't noticed any reduction > in > > spam, and when I SSL into the server and > > > > grep "Message contains blacklisted domain" /var/log/exim_mainlog > > > > I don't see any entries. > > > > Is there a way to check to see if SURBL is working? > > > > What's in your exim config? > > >

1 0

Powerdns: high performance dns recursor
by Yusuf Goolamabbas 29 Sep '06

29 Sep '06

I haven't put this through its paces yet. The recursor can forward zones to a nameserver (I still prefer dnscache's syntax) so this can be used as a caching nameserver in front of rbldnsd http://doc.powerdns.com/built-in-recursor.html http://wiki.powerdns.com/projects/trac/ The author of PowerDNS Bert Hubert is well-known in Linux circles for his work in explaining the esoteric commands of iproute via LARTC (Linux Advanced Routing and Traffic Control) http://lartc.org/ Hope this helps, Regards, Yusuf -- Yusuf Goolamabbas yusufg(a)outblaze.com

1 0

New User Needs Help
by Robert Temple 28 Sep '06

28 Sep '06

Hello; I wanted to replace Spamassassin on my server, so I've set up SURBL using instructions from a forum on my server companies site (here: http:/ /forums.ev1servers.net/showthread.php?t=57896) The installation seemed to go well, but I haven't noticed any reduction in spam, and when I SSL into the server and grep "Message contains blacklisted domain" /var/log/exim_mainlog I don't see any entries. Is there a way to check to see if SURBL is working? Thanks for any suggestions. - Robert

2 1

Re: [SPAM-TAG] [SURBL-Discuss] Lots of new questionable URL, redirectors
by opencomputing＠gmail.com 28 Sep '06

28 Sep '06

>Some of these may be minor redirection sites being abused. > >One operator of such a site contacted us bemoaning the abuse and >also contemplating shutting it down due to it. > > If only these URL redirectors checked the target URL in URIBL/SURBL the first time it gets submitted and also during the runtime, every time it gets accessed, it should reduce the problem immensely. I guess plain laziness to combat spam ain't going to work ;) cheers, skar. -- OpenProtect - The email virus/spam filter http://openprotect.com

2 5

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss