http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4200





------- Additional Comments From [EMAIL PROTECTED]  2006-06-27 21:38 -------
FWIW, red.uribl.com lists any active domains until they are 6 days old.   so if 
spammy domain is 3 days old and starts showing up as active, we temp-list for 3 
days.  if they start spewing day 1, we templist for 5 days.

but, if the domain has been confirmed black, it gets stuck on black, so red is 
only a catchall for the rest.

i guess my point i'm trying to make here is, dob.sibl.support-intelligence.net 
should only be a small subset of SURBL or URIBL black... the only benefit it 
has is that it is a prelist, so there is no 0-8 minute replication delay to 
mirrors.

also, the purpose of this bug is to score by domain age in general, not just to 
catch zero-day stuff... uribl's do that just fine.

what this really needs is something like this..

host -tTXT nmgi.com.age.uribl.com 1.2.3.4
nmgi.com.age.uribl.com descriptive text "4119"

# host -tTXT bestrates87.com.age.uribl.com 172.17.1.104
bestrates87.com.age.uribl.com descriptive text "1"

obviously 'age.uribl.com' does not exist to the outside world.   

i built this zone with a short sql query and a few lines of perl in a couple 
minutes.  it consists of pretty much any domain showing up as a uri (minimum 
volume required) for the last 30 days...  

Viewable here: http://www1.uribl.com/stats/domainage.rbldnsd.txt

if nothing else, its kinda neat to see who all registered their domain name on 
the same day  you did... ;)

################################################
# 4119 day old domains found in email
################################################

:127.0.0.2:4119

aapg.org
4x44u.com
ashastd.org
worldhealth.net
electricstores.com
nmgi.com
the-body-shop.com
goldentulip.com




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to