Hi all,

I wrote a procmail script, and a few corresponding shell scripts to
put together a list of emails that were marked for both JMF_W
(HOSTKARMA_W) and URIBL_BLACK in the same message. While not
necessarily the complete conflict you might think (how can a mail
server be whitelisted while the message body contains a blacklisted
URL?), but I still thought it was worth investigating, and perhaps of
general interest to those that manage their respective lists.

So, I took about 6MB of mail, stripped the last "Received:" entry and
all of the URIs in the message and passed them through again to
multi.uribl.com, and produced a list of about 7k lines with the
Received line and corresponding blacklisted domains.

It was an interesting exercise, if nothing else. Hopefully someone can
make use of it. I'd like to hear if there are either some URIs or mail
servers that were listed wrong from this list. I know some of the
emails contained no blacklisted domains a few days after receiving the
email where they were originally marked (they had since been removed),
so it would be interesting if there were others like that on this
list.

For example, does salesforce.com know one of the domains included in
their emails is blacklisted?

Hopefully it's not too much text for the list...

Thanks,
Alex

Attachment: uribl-list-2
Description: Binary data

Reply via email to