Spam Filter ISP Forums : black.uribl.com and the SURBL filter https://www.logsat.com/spamfilter/forums/ Sat, 14 Mar 2026 12:45:32 +0000 Sun, 31 Mar 2013 11:07:28 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=7055 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[black.uribl.com and the SURBL filter : The ipaddress 8.0.10.9 will be...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7055&PID=14489&title=blackuriblcom-and-the-surbl-filter#14489 Author: yapadu
Subject: 7055
Posted: 31 March 2013 at 11:07am

The ipaddress 8.0.10.9 will be the IP address of your DNS server.  Your DNS server makes the requests to uribl.com, so it is not spamfilter that directly does it.

You can fix the problem by:

1) Doing your own DNS requests (you could install a DNS server on the same machine as spamfilter and use that).

2) You can remove the lookup forblack.uribl.com from the SURBL server lookup under the list of black lists.
]]> Sun, 31 Mar 2013 11:07:28 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7055&PID=14489&title=blackuriblcom-and-the-surbl-filter#14489 <![CDATA[black.uribl.com and the SURBL filter : Recently we noticed that a number...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7055&PID=14486&title=blackuriblcom-and-the-surbl-filter#14486 Author: gillonba
Subject: 7055
Posted: 27 March 2013 at 2:39pm

Recently we noticed that a number of e-mails are being rejected with a message looking something like this:

03/27/13 11:28:50:746 -- (4900) SURBL: w3.org - 521 A URL in the email is Blacklisted by SURBL: black.uribl.com. Queries from 8.0.10.9 are restricted due to high volume. See http://uribl.com/about.shtml#abuse. Emails blocked due to this response are done so incorrectly.  Please fix your implementation. -- 

Note that the IP address 8.0.10.9 is NOT ours.  I have seen IPs from all over the 8.0.10.* and 8.0.11.* block.  Our SURBL Servers list contains both black.uribl.com and multi.surbl.org .  I believe that removing black.uribl.com is likely to resolve the issue, but I was wondering

a) has anyone else seen anything like this lately
b) what other servers are you using
c) (for logsat) Is there a way to NOT mark these e-mails as spam?  The message implies that this is probably a false positive after all

Thanks!
]]> Wed, 27 Mar 2013 14:39:24 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7055&PID=14486&title=blackuriblcom-and-the-surbl-filter#14486