Am 17.11.2011 16:27, schrieb Marc Perkel:
> I'm exploring a variety of ideas to determine the difference between
> "serious" domains down to throw away domains used by spammers. The ideas
> I'm presenting here are not complete but are just a conversation starter.
> 
> for example, if the sending domain has no MX records of its own it is
> more likely spam that if there are 3 or more MX records that resolve to
> multiple IPs over more than one network. Generally spam only domains are
> minimally configured, and highly configured domains are not spam only. I
> also think that NS records might indicate that a domain is serious or not.
> 
> I think the serious scale could be a useful factor in SA. It doesn't
> determine if it's spam or ham in itself. Yahoo is a serious domain and
> there's lost of spam. Serious domains should not be blacklisted for
> example. We could also look for consistency. Bad RDNS from a serious
> domain might be a spam indicator.
> 
> There might be other methods of detecting serious domains. If they are
> using expensive services. Spammers would not have their dns hosted with
> Ultra DNS, or use the expensive registrars, or other services that are
> expensive.
> 
> Also - thinking we should slowly mine the whois database and provide
> some sort of DNS based lookup of whois information to be able to
> determine the registrar of a domain, the domain age, or other info that
> would be useful in determining that the domain is serious or not.
> 
> Who thinks I'm onto something?
> 
> 

in the end this is a reputation question
as far i know this is worked on a more global standart
with ideas from i.e dkim
perhaps you should invest time there
not sure if this is a right link
http://tools.ietf.org/html/draft-kucherawy-reputation-query-dns-00

but i know others , reading this list know better about whats comming up
there, perhaps they answer better

and as far i remember , there where solutions to identify
domains registration age, as there where a possibility
for "tasting" domains, but as i remember this isnt possible anymore


-- 
Best Regards

MfG Robert Schetterer

Germany/Munich/Bavaria

Reply via email to