[re-sending; forgot to munge the spammy URIs, causing my reply to get discarded.]
On Wednesday, July 21, 2004, 8:45:49 PM, Asif Iqbal wrote: > Homer wrote: >> >> From: >> >> <http://www.rulesemporium.com/cgi-bin/uribl.cgi?report=1;uri=lawful7322dryg.us;list=URIBL:ws.surbl.org;> >> >> sharyxp.us >> >> >> * URIBL: ws.surbl.org: listed [Blocked, See: >> http://www.stearns.org/sa-blacklist/] >> * URIBL: sc.surbl.org: not listed >> * URIBL: ob.surbl.org: listed [Blocked, See: >> http://www.surbl.org/lists.html#ob] >> * URIBL: multi.surbl.org: listed [Blocked, sharyxp.us on lists >> [ws][ob], See: http://www.surbl.org/lists.html] >> * URIBL: ab.surbl.org: not listed >> >> See http://surbl.org for info on how to implement, along with a serch >> of the archives from this list. > I am already using that. Here is the output I get > Also I pass the emails through list.dsbl.org and sbl-xbl.spamhaus.org > Here is the spamassassin -t -D of this email gives me. > Sorry for sending such a big output but it may help to get some good > suggestion of blocking spams like this in the future. Please advise if I > should have send the report differently, like an attachment. Thanks a > lot > --- report begins --- (look for the phrase "report ends" for the end of > this report) [...] > debug: Razor2 results: spam? 0 highest cf score: 0 > debug: running raw-body-text per-line regexp tests; score so far=0 > debug: running uri tests; score so far=0 > debug: uri tests: Done uriRE > debug: checking url: http://3.shareye-MUNGED.us/lx.php?a=donotemail&[EMAIL > PROTECTED] > debug: querying for shareye.us.sc.surbl.org > debug: Query failed for shareye.us.sc.surbl.org > debug: checking url: mailto://3.shareye.us-MUNGED/lx.php?a=donotemail&[EMAIL > PROTECTED] > debug: checking url: http://7.sharyxp.us-MUNGED/lx.php?a=search&b=5&[EMAIL > PROTECTED] > debug: querying for sharyxp.us.sc.surbl.org > debug: Query failed for sharyxp.us.sc.surbl.org > debug: checking url: mailto://7.sharyxp.us-MUNGED/lx.php?a=search&b=5&[EMAIL > PROTECTED] > debug: running full-text regexp tests; score so far=0 > debug: Razor2 is available [...] This shows that you're using only the sc.surbl.org list. If you add the others in, as Homer has done, you will see these domains are listed in ws.surbl.org and ob.surbl.org. The various SURBL lists are described at: http://www.surbl.org/lists.html And the Quick Start has sample rules and scores if you want to add the other lists to your configs. http://www.surbl.org/quickstart.html Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
