> McDonald, Dan wrote:
>
>
>> On Tue, 2008-03-25 at 16:44 +0100, Yet Another Ninja wrote:
>>
>> util_rb_2tld  by.ru
>> util_rb_2tld  tripod.com
>
> So, the man page is wrong?
> [luser <at> sa ~]$ man Mail::SpamAssassin::Conf
> /util_rb_2tld
> [...]
>        util_rb_2tld 2tld-1.tld 2tld-2.tld ...

No, I dont think this was a message regarding util_rb_2tld usage format.

I think the point he was making was that if you add by.ru and tripod.com to your util_rb_2tld config it will help filter spam abusing those hosts.

hotmail.ru would be another one.. as the tripod spammers started hitting hotmail.ru with it today.

+-----------------------+---------------------+
| domain                | seen                |
+-----------------------+---------------------+
| skn24n.hotmail.ru     | 2008-03-26 11:41:46 |
| fe0ky.hotmail.ru      | 2008-03-26 11:35:45 |
| xyw7dgf.hotmail.ru    | 2008-03-26 11:33:21 |
| mmyjolyn.tripod.com   | 2008-03-25 14:48:51 |
| taviamarya.tripod.com | 2008-03-25 14:47:17 |
| roljanna.tripod.com   | 2008-03-25 14:47:08 |
+-----------------------+---------------------+

# host -tTXT skn24n.hotmail.ru.multi.uribl.com
skn24n.hotmail.ru.multi.uribl.com text "Blacklisted, see http://lookup.uribl.com/?domain=skn24n.hotmail.ru";

See http://rss.uribl.com/hosters/  for host abuse listings.

--
Dallas Engelken
[EMAIL PROTECTED]
http://uribl.com

Reply via email to