Please read the whole thread before flaming someone.
This one started with 'wolfgang' asking why he's unable to lookup
219.144.194.158 in multib.surbl.org.
219.144.194.158 is listed in ph und ws, according to the lookup tool on
rulesemporium.com.
dig 219.144.194.158.multi.surbl.org => no results
dig 158.194.144.219.multi.surbl.org => returns 127.0.0.12
To make things more complicated, the URIBL ( NOT! SURBL) lookup says.
(parts cut off)
> 219.144.194.158 NOT Listed on URIBL: NOT Listed on SURBL
> 158.194.144.219 Listed on URIBL black Listed on SURBL details
Lookup: 158.194.144.219.multi.surbl.org Result: Blocked, 158.194.144.219
on lists [ws][ph]
which is NOT what rulesemporium.com said.
I take it that 219.144.194.158 is the actual phish site (located in PR
of China), not 158.194.144.219 (Czech university). But I'm getting
somewaht confused here.
But the mail problem is that SA/SURBL (3.0.4) does apparently not try to
lookup IPs, only domains.
Dirk
Raymond Dijkxhoorn schrieb:
Hi!
What about false positives? 158.194.144.219 apparently belogs to Palacky
University in Olomouc,Czechia. This IP is now wrongfully listed in
SURBL!
I'll post that problem to the SURBL-List as well, I think. Jeff C.
certainly doesn't want to harm innocent bystanders...
So they might have a hacked student PC, thats happening all the time.
Please dont post stuff like this just like that if you dont know whats
going on. We see phising at a lot of major university's. Why?
Bandwidth is plenty there, security is less, easy target.
Did you see 158.194.144.219 in regular mails?
Why do you think its wrongly listed?
I dont see anything in your mail explaning why you think it was added
wrongly? Since it belongs to a university? Sorry, go figure.
Bye,
Raymond.
