SURBL: Difference between revisions
Filled in 5 bare reference(s) with reFill () |
→Lists: Updated to current lists |
||
| Line 4: | Line 4: | ||
SURBL provides several different lists from different sources:<ref>{{cite web|url=http://www.surbl.org/lists|title=Lists|work=surbl.org}}</ref> |
SURBL provides several different lists from different sources:<ref>{{cite web|url=http://www.surbl.org/lists|title=Lists|work=surbl.org}}</ref> |
||
* |
* ABUSE - spam and abuse sites |
||
* |
* PH - phishing sites |
||
* |
* MW - malware sites |
||
* |
* CR - cracked sites |
||
* SC [[SpamCop]] reported sites |
|||
* PH phishing sites |
|||
All lists are gathered into ''multi.surbl.org''. |
All lists are gathered into ''multi.surbl.org''. |
||
Revision as of 06:27, 4 December 2016
SURBL (previously stood for Spam URI RBL) is a collection of URI DNSBL lists of Uniform Resource Identifier (URI) hosts, typically web site domains, that appear in unsolicited messages. SURBL can be used to search incoming e-mail message bodies for spam payload links to help evaluate whether the messages are unsolicited. For example, if http://www.example.com is listed, then e-mail messages with a message body containing this URI may be classified as unsolicited. URI DNSBLs differ from prior DNSBLs, which commonly list mail sending IP addresses. SURBL is a specific instance of the general URI DNSBL list type.
Lists
SURBL provides several different lists from different sources:[1]
- ABUSE - spam and abuse sites
- PH - phishing sites
- MW - malware sites
- CR - cracked sites
All lists are gathered into multi.surbl.org.
Usage
A DNS query of a domain or IP address taken from a URI can be sent in the form of spamdomain.example.multi.surbl.org or 4.3.2.1.multi.surbl.org. The multi DNS zone return records contain codes that indicate which list contains the queried for domain or IP address. Many spam filters support use of SURBL. Small sites can use SURBL through public DNS queries, and an rsync data feed is available to professional users. SURBL data are also available in Response Policy Zone and CSV formats.
History
SURBL was created in 2004 to replace formatted text-based lists such as sa-blacklist that were previously used in SpamAssassin and distributed through web sites. The announcement of SURBL as a URI DNSBL was made April 8, 2004 to the SpamAssassin user community.[2] SURBL is the first major list of the URI DNSBL type, later followed by uribl.com,[3] IvmURI[4] and Spamhaus DBL.[5]
See also
- DNSBL, a spam prevention method in which e-mail messages are accepted or rejected depending on the IP address of the mail server from which the message is received.
References
- ^ "Lists". surbl.org.
- ^ "Gmane -- Announcing SURBL support in SA 2.63 and 3.0 plugins". gmane.org.
- ^ "URIBL.COM - Realtime URI Blacklist". uribl.com.
- ^ "invaluement". invaluement.com.
- ^ "DBL - The Spamhaus Project". spamhaus.org.