<div dir="ltr">If the data source is phishtank,the URL Blacklist service at <a href="http://www.surbl.org/lists#ph">http://www.surbl.org/lists#ph</a> also uses phishtank as one of the sources.<br><div class="gmail_extra"><br>
<br><div class="gmail_quote">On 24 August 2014 15:30, Jerry Benton <span dir="ltr"><<a href="mailto:jerry.benton@mailborder.com" target="_blank">jerry.benton@mailborder.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">Nick,<div><br></div><div>You have presented what you see as a problem, yet have not presented a solution. If you have a better way to do it, write it and send it to me or this list and I will be happy to implement it. If you think it is overkill to blacklist an entire domain, again, provide an alternate solution and if it makes sense and is sustainable I will be happy to implement it. </div>
<div><br></div><div>The current build uses domains instead of URLs because the list from the current source at <a href="http://phishtank.com" target="_blank">phishtank.com</a>, which uses URLs, was somewhere around 30,000 items the last time I checked. That is way too big for a config file. Therefore, the current build script scrubs those and gets it under 1,000 items. This is done by evaluating all of the URLs and pulling the domains from them. This is not like blacklisting a /16 CIDR. There is (should be) a hell of a lot more control of what content gets posted on a domain’s website. If there is malicious content anywhere on a website, the whole thing should be blacklisted until they fix it. This isn’t mystifying. Google does the same thing with its search results. </div>
<div><br></div><div><br></div><div>Requirements for a new solution:</div><div><br></div><div>- A source for the bad sites. <a href="http://www.phishtank.com" target="_blank">www.phishtank.com</a> is currently used. It is actively maintained. If you know of a better resource, feel free to let me know.</div>
<div>- A new cron to replace the current version. I am aware it is very basic and needs to be updated. What we need is either a cron that will read a custom section of phishing.bad.sites.conf or we can add an additional file called something like phishing.bad.sites.custom.conf that can be read and merged with phishing.bad.sites.conf during the build. </div>
<div>- The same thing for phishing.safe.sites.conf<br><div>- A source for the safe sites if you think the current source is a bad one. </div><div>- The same cron logic as stated above for the bad sites. </div><div><br></div>
<div><br></div><div>So what would be the most helpful thing at the moment would be a cron that addresses the above issue regarding custom entries. It would need to evaluate your “safe” entries and remove it from the dynamic “bad” entries if present. It would then need to append the custom “safe” entries to phishing.safe.sites.conf.</div>
<div><br></div><div>
<div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<br>-</div><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
Jerry Benton</div><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<a href="http://www.mailborder.com" target="_blank">www.mailborder.com</a></div>
</div><div><div class="h5">
<br><div><div>On Aug 24, 2014, at 12:07 AM, Nick Edwards <<a href="mailto:nick.z.edwards@gmail.com" target="_blank">nick.z.edwards@gmail.com</a>> wrote:</div><br><blockquote type="cite">Would it not be better to first fix the<br>
<a href="http://phishing.mailborder.com/phishing.bad.sites.conf" target="_blank">http://phishing.mailborder.com/phishing.bad.sites.conf</a><br>file?<br><br>I find it a bit ridiculous that you list URI shortners, like <a href="http://t.co" target="_blank">t.co</a> and<br>
others (yet strangely not <a href="http://fb.me" target="_blank">fb.me</a>)<br>its for that reason we dont and wont as an ISP, use your list. other<br>mailscanner users in my group were also mystified why, and wont use it<br>
now.<br><br>It's kind of like the old spews, list a /16 because of one or two<br>spammers, complete overkill<br><br>just sayin...<br><br><br>On 8/12/14, Jerry Benton <<a href="mailto:jerry.benton@mailborder.com" target="_blank">jerry.benton@mailborder.com</a>> wrote:<br>
<blockquote type="cite">Hristo,<br><br>I would like to have content dynamically updated at some point. An example<br>would be an optional Phishing updates, ScamNailer updates (after we fix it),<br>etc. Also, versioning for content, a better wiki with better authoring<br>
control, etc. The debate has already gone back and forth over this mailing<br>list regarding static vs CMS, so we don't need to rehash the same debate.<br><br><br><br>-<br>Jerry Benton<br><a href="http://www.mailborder.com" target="_blank">www.mailborder.com</a><br>
<br>On Aug 11, 2014, at 11:55 AM, Richard Siddall <<a href="mailto:richard.siddall@elirion.net" target="_blank">richard.siddall@elirion.net</a>><br>wrote:<br><br><blockquote type="cite">Hristo Benev wrote:<br><blockquote type="cite">
Jerry,<br><br> Based on navbar-fixed-top<br><br>I've created this<br><a href="http://hbcom.info/mailscanner/mailscanner_rapid_prototype_v1.png" target="_blank">http://hbcom.info/mailscanner/mailscanner_rapid_prototype_v1.png</a><br>
<br>Is CMS really needed? How many pages are changed and how frequently?<br>AFAIK most of the changes are in the wiki.<br><br>Development and version control could be done via GIT (or other VCS).<br><br></blockquote><br>
"Build A Blog With Jekyll And GitHub Pages"<br>
<a href="http://www.smashingmagazine.com/2014/08/01/build-blog-jekyll-github-pages/" target="_blank">http://www.smashingmagazine.com/2014/08/01/build-blog-jekyll-github-pages/</a><br><br>Might suit a developer better than installing WordPress and a<br>
Bootstrap-based theme.<br><br><br><blockquote type="cite">Do you have any comments?<br><br>Hristo<br><br></blockquote><br><span style="white-space:pre-wrap"> </span>Richard.<br><br>--<br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br><br>Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>Support MailScanner development - buy the book off the website!<br></blockquote><br><br></blockquote>-- <br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br><br>Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>Support MailScanner development - buy the book off the website! <br></blockquote></div><br></div></div></div></div><br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br></div></div>