Hi all, I wrote a procmail script, and a few corresponding shell scripts to put together a list of emails that were marked for both JMF_W (HOSTKARMA_W) and URIBL_BLACK in the same message. While not necessarily the complete conflict you might think (how can a mail server be whitelisted while the message body contains a blacklisted URL?), but I still thought it was worth investigating, and perhaps of general interest to those that manage their respective lists.
So, I took about 6MB of mail, stripped the last "Received:" entry and all of the URIs in the message and passed them through again to multi.uribl.com, and produced a list of about 7k lines with the Received line and corresponding blacklisted domains. It was an interesting exercise, if nothing else. Hopefully someone can make use of it. I'd like to hear if there are either some URIs or mail servers that were listed wrong from this list. I know some of the emails contained no blacklisted domains a few days after receiving the email where they were originally marked (they had since been removed), so it would be interesting if there were others like that on this list. For example, does salesforce.com know one of the domains included in their emails is blacklisted? Hopefully it's not too much text for the list... Thanks, Alex
uribl-list-2
Description: Binary data