You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Yet Another Ninja <sa...@alexb.ch> on 2008/03/25 16:44:09 UTC

util_rb_2tld

util_rb_2tld  by.ru
util_rb_2tld  tripod.com

.-)


Re: Re: util_rb_2tld

Posted by Dallas Engelken <da...@uribl.com>.
 > McDonald, Dan wrote:
 >
 >
 >> On Tue, 2008-03-25 at 16:44 +0100, Yet Another Ninja wrote:
 >>
 >> util_rb_2tld  by.ru
 >> util_rb_2tld  tripod.com
 >
 > So, the man page is wrong?
 > [luser <at> sa ~]$ man Mail::SpamAssassin::Conf
 > /util_rb_2tld
 > [...]
 >        util_rb_2tld 2tld-1.tld 2tld-2.tld ...

No, I dont think this was a message regarding util_rb_2tld usage format.

I think the point he was making was that if you add by.ru and tripod.com 
to your util_rb_2tld config it will help filter spam abusing those hosts.

hotmail.ru would be another one.. as the tripod spammers started hitting 
hotmail.ru with it today.

+-----------------------+---------------------+
| domain                | seen                |
+-----------------------+---------------------+
| skn24n.hotmail.ru     | 2008-03-26 11:41:46 |
| fe0ky.hotmail.ru      | 2008-03-26 11:35:45 |
| xyw7dgf.hotmail.ru    | 2008-03-26 11:33:21 |
| mmyjolyn.tripod.com   | 2008-03-25 14:48:51 |
| taviamarya.tripod.com | 2008-03-25 14:47:17 |
| roljanna.tripod.com   | 2008-03-25 14:47:08 |
+-----------------------+---------------------+

# host -tTXT skn24n.hotmail.ru.multi.uribl.com
skn24n.hotmail.ru.multi.uribl.com text "Blacklisted, see 
http://lookup.uribl.com/?domain=skn24n.hotmail.ru"

See http://rss.uribl.com/hosters/  for host abuse listings.

-- 
Dallas Engelken
dallase@uribl.com
http://uribl.com


Re: util_rb_2tld

Posted by "McDonald, Dan" <Da...@austinenergy.com>.
On Tue, 2008-03-25 at 16:44 +0100, Yet Another Ninja wrote:
> util_rb_2tld  by.ru
> util_rb_2tld  tripod.com

So, the man page is wrong?
[luser@sa ~]$ man Mail::SpamAssassin::Conf
/util_rb_2tld
[...]
        util_rb_2tld 2tld-1.tld 2tld-2.tld ...
                This option allows the addition of new 2nd-level TLDs
                (2TLD) to the RegistrarBoundaries code.  Updates to the
                list usually happen when new versions of SpamAssassin
                are released, but sometimes it's necessary to add in new
                2TLDs faster than a release can occur.  2TLDs include
                things like co.uk, fed.us, etc.


-- 
Daniel J McDonald, CCIE #2495, CISSP #78281, CNX
Austin Energy
http://www.austinenergy.com