You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Thomas Arend <ml...@arend-whv.info> on 2005/01/03 16:55:11 UTC

How got arcor.de into blocklist?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

I have received a FalsePositive because arcor.de got into trhe blocklists.

Has someone informations why arcor.de got into the blocklist?


Thanks,

Thomas

Here is the report:

Content analysis details:   (5.5 points, 5.0 required)

 pts rule name              description
- ---- ---------------------- --------------------------------------------------
- -2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                            [score: 0.0000]
 2.0 URIBL_PH_SURBL         Contains an URL listed in the PH SURBL blocklist
                            [URIs: arcor.de]
 0.4 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL blocklist
                            [URIs: arcor.de]
 1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: arcor.de]
 4.3 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL blocklist
                            [URIs: arcor.de]

- -- 
icq:133073900
http://www.t-arend.de
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFB2WrnHe2ZLU3NgHsRAnL9AJ4zxK2pYtR+5/tPwUXhLF38hl8SUACfaKAH
fVRN6krdU4pmWn17GPSepHI=
=ZtrE
-----END PGP SIGNATURE-----

Re: How got arcor.de into blocklist?

Posted by Jeff Chan <je...@surbl.org>.
On Monday, January 3, 2005, 7:55:11 AM, Thomas Arend wrote:
> I have received a FalsePositive because arcor.de got into trhe blocklists.

> Has someone informations why arcor.de got into the blocklist?


> Here is the report:

> Content analysis details:   (5.5 points, 5.0 required)

>  pts rule name              description
> - ---- ---------------------- --------------------------------------------------
> - -2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
>                             [score: 0.0000]
>  2.0 URIBL_PH_SURBL         Contains an URL listed in the PH SURBL blocklist
>                             [URIs: arcor.de]
>  0.4 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL blocklist
>                             [URIs: arcor.de]
>  1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
>                             [URIs: arcor.de]
>  4.3 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL blocklist
>                             [URIs: arcor.de]

arcor.de is not on any SURBL lists.  In fact it is whitelisted
so that it can't appear.  You can look up SURBLs at:

  http://www.rulesemporium.com/cgi-bin/uribl.cgi

Or just do a name resolution as described at:

  http://www.surbl.org/implementation.html


You may be seeing a false positive as described at:

  http://bugzilla.spamassassin.org/show_bug.cgi?id=3997

Perhaps you can add some debugging information or a sample
message to that bug.

Jeff C.
-- 
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/


Re: How got arcor.de into blocklist?

Posted by Loren Wilton <lw...@earthlink.net>.
I would hope that site doesn't end up in *ANY* used lists.  I tried 5 major
isps and sites off the top of my head, including google.com, and *every one*
of them showed up in the list.

        Loren

----- Original Message ----- 
From: "Jeff Chan" <je...@surbl.org>
To: "Gary Funck" <ga...@intrepid.com>
Cc: <us...@spamassassin.apache.org>
Sent: Monday, January 03, 2005 3:51 PM
Subject: Re: How got arcor.de into blocklist?


> On Monday, January 3, 2005, 9:25:20 AM, Gary Funck wrote:
>
> >> From: Thomas Arend
> >> Sent: Monday, January 03, 2005 7:55 AM
> >>
> >> I have received a FalsePositive because arcor.de got into trhe
blocklists.
> >>
> >> Has someone informations why arcor.de got into the blocklist?
> >>
>
> > You probably need to go to the places where the URL's are blacklisted,
> > and requrest that the blacklisting be removed.
>
> > For example,
> > http://urlblacklist.com/?sec=search&URL=arcor.de&action=Search>
>
> I'm not sure whether that page reports to SURBLs or not.
>
> However removal procedures for the surbl.org lists are
> described at:
>
>   http://www.surbl.org/lists.html
>
> Jeff C.
> -- 
> Jeff Chan
> mailto:jeffc@surbl.org
> http://www.surbl.org/


Re: How got arcor.de into blocklist?

Posted by Jeff Chan <je...@surbl.org>.
On Monday, January 3, 2005, 9:25:20 AM, Gary Funck wrote:

>> From: Thomas Arend
>> Sent: Monday, January 03, 2005 7:55 AM
>>
>> I have received a FalsePositive because arcor.de got into trhe blocklists.
>>
>> Has someone informations why arcor.de got into the blocklist?
>>

> You probably need to go to the places where the URL's are blacklisted,
> and requrest that the blacklisting be removed.

> For example,
> http://urlblacklist.com/?sec=search&URL=arcor.de&action=Search>

I'm not sure whether that page reports to SURBLs or not.

However removal procedures for the surbl.org lists are
described at:

  http://www.surbl.org/lists.html

Jeff C.
-- 
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/


RE: How got arcor.de into blocklist?

Posted by Gary Funck <ga...@intrepid.com>.
> From: Thomas Arend
> Sent: Monday, January 03, 2005 7:55 AM
>
> I have received a FalsePositive because arcor.de got into trhe blocklists.
>
> Has someone informations why arcor.de got into the blocklist?
>

You probably need to go to the places where the URL's are blacklisted,
and requrest that the blacklisting be removed.

For example,
http://urlblacklist.com/?sec=search&URL=arcor.de&action=Search>