>-----Original Message-----
>From: Marc Kool [mailto:[EMAIL PROTECTED]
>Sent: Monday, July 12, 2004 6:47 PM
>To: [EMAIL PROTECTED]
>Subject: Re: include IP lookups in SURBL lists
>
>
>Robert Brooks wrote:
>> Chris Santerre wrote:
>> 
>>> *huge snip*
>>>
>>> First, this has been discussed. To many issues with FPs here for 
>>> virtually
>>> hosted domains.
>
>I missed the discussion and could not find it in the archive :-(
>My proposal was to do it with care but maybe we could do it 
>with *great* care
>and give it a relatively low score (e.g. 1.0).  

It wasn't on the SA-Talk list ;) 

There is a group of people who are ALL over this. They know a TON about
spammers and when they get new domains. ANd they have lists of all these
domains broken down by spammer. 

Some of this stuff gets updated daily in ws.surbl.org, and some gets put
into ds.surbl.org. But I'm not sure how often that is getting updated. So we
are actually adding domains of spammers that haven't even been used yet :)



>
>I did some further investigation:
>The spammer had URIs that - when retrieved - were _redirected_ 
>to www.ASStraffic.com and
>www.MILFriders.com which are included in the free URL database 
>in the "adult section"
>(www.milfriders.com resolves to 66.115.182.22 which has 131 
>known sex domains).
>This means that on my site, the spam can get through but the 
>adult site is blocked by
>the (mandatory) web proxy...

In this one example...sure. Why not send me those 131 domains and it ends
there :p  Recent topic of starting a adult surbl list would also put and end
to that. 

SURBL's claim to fame will be its extremly low FP rate and fast pace to fix
any found. We need to keep that to be successful. THe best thing one can do
is simply contribute those domains. long lists like 131 adult domains can be
sent to one of the SURBL Samurai :)

--Chris 

Reply via email to