Marc Perkel <[EMAIL PROTECTED]> writes:
> Here's an example. How do we prevent this?
> maria2004.com
1. URIBL_SBL is only one rule in 3.0. No rule is every going to be 100%
accurate. It's working as designed, catching URLs being supported by
spam-supporting IP addresses that are listed in SBL:
$ host -t NS maria2004.com|awk '{print $4}'|xargs -n 1 host -t A|awk '{print
$4}'|xargs rblcheck -t -c -s sbl.spamhaus.org
66.218.71.205 RBL filtered by sbl.spamhaus.org:
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL15611
216.109.116.20 RBL filtered by sbl.spamhaus.org:
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL15612
66.218.71.205 RBL filtered by sbl.spamhaus.org:
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL15611
216.109.116.20 RBL filtered by sbl.spamhaus.org:
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL15612
2. Actually, we know it's only about 99.1% accurate, but we have scores
so it will be weighted appropriately when 3.0 comes out.
3. SBL is not completely alone in pegging Yahoo as supporting
spamvertized URLs here:
http://www.openrbl.org/dnsbl?i=maria2004.com
Daniel
--
Daniel Quinlan anti-spam (SpamAssassin), Linux,
http://www.pathname.com/~quinlan/ and open source consulting
