On Thu, May 15, 2014 09:08, David Jones wrote: > We use the fresh15.spameatingmonkey.net RBL. > > http://spameatingmonkey.com/lists.html >
I checked three domain names used by the spam messages received yesterday. All of the domains were registered yesterday as well. None of them report as being in any of the fresh lists at spameatingmonkey.com. Nor are they listed in DOB at support-intelligence.net. I have to wonder how soon after creation new domains are added to the fresh lists. Over 20% of the coverage period is already over for fresh.spameatingmonkey.net and I suspect that the domain used yesterday has already been abandoned. At least we are getting the exact same messages today from a bunch of different domains all registered with the same registrar: enom.com. At this point I would be willing to implement a rule to block all domains registered with that registrar and be done with it. Is there a spamassassin whois plug-in that can parse and check the registrar and the domain creation date? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:byrn...@harte-lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3
