On Mon, 30 Oct 2006, Wolfgang Uhr wrote:

> The test contains the examination of all links in the body. You
> have to get the date of registration and to calculate the age of
> this urls.

There is a URIBL for recently-registered domains - search the list
archives for "day-old bread".

> Of course for practal use you have to cache thoose whois-requests
> onto a central server and to provide a complete series of mta's.

I'm already doing this for a "spam-friendly registrar" plugin.

http://www.impsec.org/~jhardin/SURBL_registrar/

> Mathias Leisi's opinion is that it is better to avoid a direct
> spam-ham-decision but to score the age of an url.
> 
> < 5 days -> 5 Points
> < 10 days -> 3 Points
> < 15 Tage -> 1 Point
> 
> May be that this test is interesting for you.

This does sound interesting, and would be a fairly minor change to the
spam-friendly registrar plugin. I'll take a shot at it shortly. Pity
you didn't post this Friday or I would have fiddled with it over the
weekend... :)

I'm thinking the plugin would implement a set of rules like
URI_DOM_AGE_[5,10,15,20,25,30] and let the normal scoring and score
customization methods apply.

Comments?

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]    FALaholic #11174    pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  ...the Fates notice those who buy chainsaws...
                                              -- www.darwinawards.com
-----------------------------------------------------------------------
 Tomorrow: Halloween


Reply via email to