News from the cesspoll

[Martin Hepworth]

Well there's the default URI-RBL's that get installed with SA 3.x

And another good two are from http://www.uribl.com/

You'll need the Net::DNS installed and the SA- plugin activitad in init.pre.



--
Martin Hepworth 
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Dave Shariff Yadallee -
> System Administrator a.k.a. The Root of the Problem
> Sent: 28 April 2006 15:08
> To: MailScanner discussion
> Subject: Re: News from the cesspoll
> 
> On Fri, Apr 28, 2006 at 02:54:51PM +0100, Martin Hepworth wrote:
> >
> >
> > URI-RBL's would catch this fairly quickly, as they do already...nothing
> to
> > see here, move along..
> >
> 
> URL for the above please.  Also, which RBL do we add to our
> rbdnsbl list?
> 
> > --
> > Martin Hepworth
> > Snr Systems Administrator
> > Solid State Logic
> > Tel: +44 (0)1865 842300
> >
> > > -----Original Message-----
> > > From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> > > bounces at lists.mailscanner.info] On Behalf Of Dave Shariff Yadallee -
> > > System Administrator a.k.a. The Root of the Problem
> > > Sent: 28 April 2006 14:39
> > > To: MailScanner discussion
> > > Subject: Re: News from the cesspoll
> > >
> > > On Fri, Apr 28, 2006 at 09:24:18AM -0400, Rose, Bobby wrote:
> > > > I'm confused...how is the use of highjacked/infected computers to
> send
> > > > out spam using forged addresses obtained from the infected computer
> new?
> > > > This tactic has been used before.
> > > >
> > > > -----Original Message-----
> > > > From: mailscanner-bounces at lists.mailscanner.info
> > > > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of
> Steve
> > > > Ellis
> > > > Sent: Friday, April 28, 2006 9:08 AM
> > > > To: MailScanner discussion
> > > > Subject: Re: News from the cesspoll
> > > >
> > > >
> > > > See
> > > >
> http://www.theglobeandmail.com/servlet/story/RTGAM.20060428.wxspam28/BNS
> > > > tory/Technology/home
> > > >
> > > > At 08:41 AM 4/28/2006, you wrote:
> > > > >University of Calgary in Canada has devised an e-mail that is spam
> that
> > > >
> > > > >can fool filters.  Julian waht do you know about this?
> > > > >
> > > > >--
> > > > >This message has been scanned for viruses and dangerous content by
> > > > >MailScanner, and is believed to be clean.
> > > > >
> > > > >--
> > > > >MailScanner mailing list
> > > > >mailscanner at lists.mailscanner.info
> > > > >http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > > > >
> > > > >Before posting, read http://wiki.mailscanner.info/posting
> > > > >
> > > > >Support MailScanner development - buy the book off the website!
> > > >
> > > > Steve Ellis
> > > > Sr. Engineer
> > > > KaZaK Composites, Inc
> > > >
> > > > 781.932.5667 x105
> > > >
> > >
> > > Try http://pages.cpsc.ucalgary.ca/~aycock/papers/sz.pdf
> > >
> > > >
> > > > ***********  KaZaK Composites, Inc  CONFIDENTIAL  ***********
> > > >
> > > > Unless otherwise specified, the information contained in this
> > > >
> > > > e-mail message should be considered: privileged, confidential,
> > > >
> > > > and protected from disclosure.
> > > >
> > > >
> > > > --
> > > > This message has been scanned for viruses and
> > > >
> > > > dangerous content by MailScanner, and is
> > > >
> > > > believed to be clean.
> > > >
> > > > --
> > > > MailScanner mailing list
> > > > mailscanner at lists.mailscanner.info
> > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > > >
> > > > Before posting, read http://wiki.mailscanner.info/posting
> > > >
> > > > Support MailScanner development - buy the book off the website!
> > > > --
> > > > MailScanner mailing list
> > > > mailscanner at lists.mailscanner.info
> > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > > >
> > > > Before posting, read http://wiki.mailscanner.info/posting
> > > >
> > > > Support MailScanner development - buy the book off the website!
> > > >
> > > > --
> > > > This message has been scanned for viruses and
> > > > dangerous content by MailScanner, and is
> > > > believed to be clean.
> > > >
> > > >
> > >
> > > --
> > > This message has been scanned for viruses and
> > > dangerous content by MailScanner, and is
> > > believed to be clean.
> > >
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > >
> > > Before posting, read http://wiki.mailscanner.info/posting
> > >
> > > Support MailScanner development - buy the book off the website!
> >
> >
> > **********************************************************************
> >
> > This email and any files transmitted with it are confidential and
> > intended solely for the use of the individual or entity to whom they
> > are addressed. If you have received this email in error please notify
> > the system manager.
> >
> > This footnote confirms that this email message has been swept
> > for the presence of computer viruses and is believed to be clean.
> >
> > **********************************************************************
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
> >
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!


**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************