sc2.surbl.org, the improved version of the SpamCop SURBL list, is
ready for testing.  So is the new version of xs.surbl.org, which
is now more accurate, has far fewer FPs, etc.

sc2 adds resolved IP checks, meaning sites hosted on the same
networks are detected immediately upon the first report.  It also
means that folks should continue to use SpamCop reporting if they
want to contribute to a very powerful SURBL list.  Your SpamCop
reports now have even more power in sc2.  In cases of the worst
spammers, SpamCop reporting leads to essentially immediate
listing in sc2.

sc2 is on about 15 public nameservers and xs is on 22.  That's
probably not enough for running large production servers on, but
it should be plenty for corpus checks and mail servers with small
to medium message volumes.

If you have rsync access to the SURBL zone files you can also
mirror the files locally for testing of course.  The sc2 and xs
zones are currently available via rsync. (If you have a large
volume mail server, please apply for rsync access so that you can
mirror the zone files locally: http://www3.surbl.org/rsync-signup.html
and offload the public nameservers.)

After sc2 is tested for a while we will turn it into the
production sc.surbl.org list, assuming it has better performance
than the current list, which seems quite likely.  At that point
sc2 will go away, since it will have become sc.

xs may go into the 128th bit of multi.surbl.org if it tests well.

Please test sc2 and the revised xs and let us know how they
perform for you.  Those with large spam and ham corpora (such as
the SpamAssassin developers) are encouraged to test and please
let us know.


Here are SpamAssassin 3.0.1 and later configs for using these two lists:

urirhsbl  URIBL_SC2_SURBL  sc2.surbl.org.
body      URIBL_SC2_SURBL  eval:check_uridnsbl('URIBL_SC2_SURBL')
describe  URIBL_SC2_SURBL  Has URI in SC2 at http://www.surbl.org/lists.html
tflags    URIBL_SC2_SURBL  net

score     URIBL_SC2_SURBL  3.0

urirhsbl  URIBL_XS_SURBL   xs.surbl.org.
body      URIBL_XS_SURBL   eval:check_uridnsbl('URIBL_XS_SURBL')
describe  URIBL_XS_SURBL   Has URI in XS - Testing
tflags    URIBL_XS_SURBL   net

score     URIBL_XS_SURBL   2.0


SpamAssassin 2.64 rules and scores using SpamCopURI 0.22 or later look like 
this:

uri       SC2_URI_RBL  eval:check_spamcop_uri_rbl('sc2.surbl.org','127.0.0.2')
describe  SC2_URI_RBL  Has URI in SC2 at http://www.surbl.org/lists.html
tflags    SC2_URI_RBL  net

score     SC2_URI_RBL  3.0

uri       XS_URI_RBL   eval:check_spamcop_uri_rbl('xs.surbl.org','127.0.0.2')
describe  XS_URI_RBL   Has URI in XS - Testing
tflags    XS_URI_RBL   net

score     XS_URI_RBL   2.0


Jeff C.
--
Don't harm innocent bystanders.

Reply via email to