Mailing List Archive

> -----Original Message-----
> From: David B Funk [mailto:dbfunk@engineering.uiowa.edu]
> Sent: Wednesday, February 25, 2004 5:52 AM
> To: spamassassin-users@incubator.apache.org
> Subject: time for INFO_TLD? (RE: Another one for bigevil)
>
>
> On Wed, 25 Feb 2004, Randal, Phil wrote:
>
> > And another
> >
> > thatsu.info
> >
> > Won't post the spam...
> >
> > Phil
>
> Hmm, seems to be lots of new spam URLs using '.info' domains.
> Is it time for a INFO_TLD rule similar to the BIZ_TLD rule
> already in standard SA releases?
>

I have also noticed while grepping for URLs for Bigevil a increase in INFO
TLD and have also thought to add a some points to anything with .info

--Chris

Just don't forget mailscanner.info is one of the good domains :-)

Cheers,

Phil

---------------------------------------------
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK

> -----Original Message-----
> From: Chris Santerre [mailto:csanterre@MerchantsOverseas.com]
> Sent: 25 February 2004 14:39
> To: 'David B Funk'; spamassassin-users@incubator.apache.org
> Subject: RE: time for INFO_TLD? (RE: Another one for bigevil)
>
>
>
>
> > -----Original Message-----
> > From: David B Funk [mailto:dbfunk@engineering.uiowa.edu]
> > Sent: Wednesday, February 25, 2004 5:52 AM
> > To: spamassassin-users@incubator.apache.org
> > Subject: time for INFO_TLD? (RE: Another one for bigevil)
> >
> >
> > On Wed, 25 Feb 2004, Randal, Phil wrote:
> >
> > > And another
> > >
> > > thatsu.info
> > >
> > > Won't post the spam...
> > >
> > > Phil
> >
> > Hmm, seems to be lots of new spam URLs using '.info' domains.
> > Is it time for a INFO_TLD rule similar to the BIZ_TLD rule
> > already in standard SA releases?
> >
>
> I have also noticed while grepping for URLs for Bigevil a
> increase in INFO
> TLD and have also thought to add a some points to anything with .info
>
> --Chris
>

Chris Santerre Said:

IMHO,
BIZ_TLD and any impending INFO_TLD are a waste. My company uses .biz, as do
some of my newer (very ligitmate) clients. I actually encourage them to
purchase .biz and .info to help increase recognition of those TLDs. If we
all insist on having .com domains, we'll soon all be typing
www.mycompanyname-mytown-mystate.com. I disable BIZ_TLD and leave it to
Bayes or BigEvil to determine spamminess from domains.

cheers,
Colin

Colin A. Bartlett
Kinetic Web Solutions
www.kineticweb.biz

> I have also noticed while grepping for URLs for Bigevil a
> increase in INFO
> TLD and have also thought to add a some points to anything with .info

I thought the main reason for the proliferation of spammers in
.biz was that the .biz hierarchy (unlike .com and .net) allowed
absurdly low lifetimes for the name server information, so they
could easily set up DNS servers on their networks of virus-
compromised home computers and change the IP addresses
constantly, making things much harder to trace. Does .info
have the same problem?

--
Keith C. Ivey <kcivey@cpcug.org>
Washington, DC

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


"Keith C. Ivey" writes:
>I thought the main reason for the proliferation of spammers in
>.biz was that the .biz hierarchy (unlike .com and .net) allowed
>absurdly low lifetimes for the name server information, so they
>could easily set up DNS servers on their networks of virus-
>compromised home computers and change the IP addresses
>constantly, making things much harder to trace. Does .info
>have the same problem?

Yes. And reportedly, the other TLDs are considernig this a
good feature to add :(

- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFAPPKBQTcbUG5Y7woRAu3mAKC/4XC0tVCDeUfK1kgCXRe78DMMgwCeP2LN
R76KTIZO2BB+Cm7tKH8iSAg=
=16Pw
-----END PGP SIGNATURE-----

Those were certainly the first two rules I added to my SA rules. Then I backed out my own BIZ rule when I discovered that SA already had the rule, and just bumped up the score on it.

Loren

-----Original Message-----
From: David B Funk <dbfunk@engineering.uiowa.edu>
Sent: Feb 25, 2004 2:52 AM
To: spamassassin-users@incubator.apache.org
Subject: time for INFO_TLD? (RE: Another one for bigevil)

On Wed, 25 Feb 2004, Randal, Phil wrote:

> And another
>
> thatsu.info
>
> Won't post the spam...
>
> Phil

Hmm, seems to be lots of new spam URLs using '.info' domains.
Is it time for a INFO_TLD rule similar to the BIZ_TLD rule
already in standard SA releases?


--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{