Meng Weng Wong wrote:
> On Jun 5, 2007, at 9:35 AM, m. allan noah wrote:
>>
>> whois seems really slow, and the 'license' on the data seems to
>> prohibit it, but has anyone found a way to use that info to block
>> mails until the domain has been around for awhile?
>> i guess there must be a DNSBL for that somewhere?
>>
>> btw, the registrar for these is usually enom.com.
> 
> Support Intelligence pubilshes the Day Old Bread RHSBL:
> http://support-intelligence.com/dob/
> 
> It is in alpha.  I would be keen to hear how it does for you.

I use it with SpamAssassin and I find it quite successful.

Below is the relevant section from my local.cf file.

#DOB - from
http://mail-archives.apache.org/mod_mbox/spamassassin-users/200704.mbox/browser


header __RCVD_IN_DOB
eval:check_rbl('dob','dob.sibl.support-intelligence.net.', '255')
describe __RCVD_IN_DOB  Received via relay in new domain (Day Old Bread)
tflags __RCVD_IN_DOB    net
score __RCVD_IN_DOB     0

header RCVD_IN_DOB      eval:check_rbl_sub('dob','127.0.0.2')
describe RCVD_IN_DOB    Received via relay in new domain (Day Old Bread)
tflags RCVD_IN_DOB      net
score RCVD_IN_DOB       1.667

header DNS_FROM_DOB
eval:check_rbl_envfrom('dob','dob.sibl.support-intelligence.net.')
describe DNS_FROM_DOB   Sender from new domain (Day Old Bread)
tflags DNS_FROM_DOB     net
score DNS_FROM_DOB      1.334

urirhssub URIBL_RHS_DOB dob.sibl.support-intelligence.net A 127.0.0.2
body URIBL_RHS_DOB      eval:check_uridnsbl('URIBL_RHS_DOB')
describe URIBL_RHS_DOB  Contains an URI of a new domain (Day Old Bread)
tflags URIBL_RHS_DOB    net
score URIBL_RHS_DOB     2.75

Regards

James Turnbull

-- 
James Turnbull <[EMAIL PROTECTED]>
---
Author of Pro Nagios 2.0
(http://www.amazon.com/gp/product/1590596099/)

Hardening Linux
(http://www.amazon.com/gp/product/1590594444/)
---
PGP Key (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0C42DF40)

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to