Hi, In case anyone wants to use it in ORF, attached the updated definition file.
(Pete, I didn't post it on their newsgroup because I didn't know if you wanted the "word out"). Best Regards, Andy -----Original Message----- From: Message Sniffer Community [mailto:[email protected]] On Behalf Of Pete McNeil Sent: Sunday, May 23, 2010 3:12 PM To: Message Sniffer Community Subject: [sniffer] GBUdb.com Web Site is Up - truncate.gbudb.net text records updated Hi Sniffer Folks, The GBUdb.com web site is up http://www.gbudb.com We have also updated the generator for the truncate.gbudb.net list so that the TXT records include a link to the list descriptor at http://www.gbudb.com/truncate/ and the IP address in [square brackets]. Please tell us what you think. Thanks! _M -- Chief Scientist ARM Research Labs, LLC www.armresearch.com ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. This list is for discussing Message Sniffer, Anti-spam, Anti-Malware, and related email topics. For More information see http://www.armresearch.com To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]>
<?xml version="1.0" encoding="utf-8"?> <definitions> <blacklist><short_name>GBUdb</short_name><full_name>GBUdb Cloud</full_name><description>GBUdb stands for Good, Bad, Ugly database. It is a real-time collaborative IP reputation system. IPs are added to this list when substantially all recorded events for a given IPv4 address indicate the message content was spam, scam, virus, or other malware. Specifically the collective statistics for this category indicate that greater than > 95% of all recorded events from all active GBUdb nodes indicate a bad message and that there are a sufficient number of recorded events for the data available to be considered reliable.</description><domain>truncate.gbudb.net</domain><ip_reversed>yes</ip_reversed><supports_txt>yes</supports_txt><site_url>http://www.gbudb.com/</site_url><lookup_url>http://www.gbudb.com/truncate/index.jsp</lookup_url><dns_record_type>A</dns_record_type><any_dns_result_blocks>no</any_dns_result_blocks><actions><action><enabled>Yes</enabled><is_dynamic>No</is_dynamic><result>127.0.0.2</result><smtp_code>550</smtp_code><smtp_text>5.7.1 Message refused. Your IP address {IP} is blacklisted using {BLACKLISTNAME}. Details: {TXTDATAORWEBLOOKUP}.</smtp_text></action></actions><action_on_any_result_blocks><action><enabled>Yes</enabled><is_dynamic>No</is_dynamic><result></result><smtp_code>550</smtp_code><smtp_text></smtp_text></action></action_on_any_result_blocks></blacklist> </definitions>
############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. This list is for discussing Message Sniffer, Anti-spam, Anti-Malware, and related email topics. For More information see http://www.armresearch.com To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]>
