> On Nov 14, 2014, at 11.41, Reindl Harald <h.rei...@thelounge.net> wrote: > > Am 14.11.2014 um 17:11 schrieb listsb-spamassas...@bitrate.net: >> one characteristic that appears to be pretty consistent is the age of the >> domain name that a given message references [from header, envelope sender, >> ptr record for remote mailservers referenced in received headers, etc]. >> quite often, the domain names are very recently registered. in many >> instances, the very same day the messages are received. is there a >> rule/ruleset out there that adds points to a score based on domain name age? >> the newer the domain, the higher the score is pushed up? > > that's URIBL_RHS_DOB > http://wiki.apache.org/spamassassin/Rules/URIBL_RHS_DOB > > sadly it turned out to be not that relieable for a very high score
revisiting this - am i doing this right? >dig yournewgrabbagspecials.rocks.dob.sibl.support-intelligence.net a ; <<>> DiG 9.9.5-3-Ubuntu <<>> yournewgrabbagspecials.rocks.dob.sibl.support-intelligence.net a ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21192 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;yournewgrabbagspecials.rocks.dob.sibl.support-intelligence.net. IN A ;; AUTHORITY SECTION: dob.sibl.support-intelligence.net. 3159 IN SOA a.support-intelligence.net. zone.support-intelligence.com. 20141220 3600 14400 604800 3600 ;; Query time: 0 msec ;; SERVER: 192.168.1.60#53(192.168.1.60) ;; WHEN: Sat Dec 20 18:11:06 EST 2014 ;; MSG SIZE rcvd: 158
