On Fri, 14 Nov 2014, listsb-spamassas...@bitrate.net wrote:
one characteristic that appears to be pretty consistent is the age of the domain name that a given message references [from header, envelope sender, ptr record for remote mailservers referenced in received headers, etc]. quite often, the domain names are very recently registered. in many instances, the very same day the messages are received. is there a rule/ruleset out there that adds points to a score based on domain name age? the newer the domain, the higher the score is pushed up?
There is the URIBL_DOB that checks for such domains in URIs. We've just recently added the ability to check domain BLs for other message parts, and it's likely there will soon be rules for the latest SA to check (e.g.) envelope sender domain against the DOB BL.
-- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- The Constitution is a written instrument. As such its meaning does not alter. That which it meant when adopted, it means now. -- U.S. Supreme Court SOUTH CAROLINA v. US, 199 U.S. 437, 448 (1905) ----------------------------------------------------------------------- 897 days since the first successful private support mission to ISS (SpaceX)
