Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>:

> How do they "handle these domains in a centralized way"? Do they simply
> relay a whois request for not-yet-seen domains? Because in this case they
> have to tune their whois parsers a bit: dob.sibl.support-intelligence.net,
> in example, reports both libero.it and tomassoni.biz as being Day One Bread,
> while it is years they're around...

Day Old Bread has had some errors before.  All of .org was blacklisted for a
while for example.  Aside from the occasional errors, it's a useful list in
concept since it shows recently registered domains.

However I was referring to URI blacklists such as SURBL.org, not DOB.  SURBL
doesn't catch everything, but it catches much, and we seek to catch more.  It's
much better if we do the whois and other queries in a centralized way, do a lot
of (quick) testing, then distribute the resulting data as a blacklist which
everyone can use as relatively efficient DNS queries or rsync files.

Jeff C.

Reply via email to