Hypotheticians might want to look at jwhois, which  is a caching whois
client. Cache expiration time is configurable ...

On 05/08/2013 06:45 AM, Chris Santerre wrote:
> RE: .pw / Palau URL domains in spam
>
> Hypothetically if one were running a reputation system and didn't want
> to block all of a TLD like .pw, one could:
>
> Locally cache whois info
> create a local rbl
> check against a sending domain on the whois info based on both the
> registrar and the creation date
>
> Created On:08-May-2013 05:24:04 UTC
> Name Server:DNS1.REGISTRAR-SERVERS.COM
>
> Anything created in the last 3 days and by that registrar could be
> blocked locally.
>
> Hypothetically :)
>
> --Chris
> (My top posts smell like strawberries)
>
> > -----Original Message-----
> > From: Steve Prior [mailto:spr...@geekster.com]
> > Sent: 2013-05-07 23:02
> > To: users@spamassassin.apache.org
> > Subject: Re: .pw / Palau URL domains in spam
> >
> *snip*
>
> >
> > I blocked everything from TLD pw at the Postfix level so the
> > email gets rejected
> > without ever hitting spamassassin.
> *snip*
>
> > Problem went away completely, sorry Palau.
> >
> > Steve
> >
>

Reply via email to