Re: R: New domains (was: URIWhois plugin)

2007-09-28 Thread Jeff Chan
Quoting Kenneth Porter <[EMAIL PROTECTED]>: > --On Thursday, September 27, 2007 7:05 PM +0200 Giampaolo Tomassoni > <[EMAIL PROTECTED]> wrote: > > > The only problem is that a spammer could "query" it days before it will > > bulk send, thereby impairing the effectiveness of such approach. > > > >

Re: R: New domains (was: URIWhois plugin)

2007-09-28 Thread Kenneth Porter
--On Thursday, September 27, 2007 7:05 PM +0200 Giampaolo Tomassoni <[EMAIL PROTECTED]> wrote: The only problem is that a spammer could "query" it days before it will bulk send, thereby impairing the effectiveness of such approach. I think we need some "official" data like the domain's creatio

Re: New domains (was: URIWhois plugin)

2007-09-27 Thread Dave Pooser
> 2. As mentioned above the whois data is sometimes populated *after* the > domains > start appearing in spams. Remember that the whois data is still mostly batch > processed once or twice a day. Many of the TLD zone files (where the DNS > delegations actually come from) are updated in near real

Re: New domains (was: URIWhois plugin)

2007-09-27 Thread Jeff Chan
Quoting Jonas Eckerman <[EMAIL PROTECTED]>: > (The idea below is not mine, someone else (I'm sorry, but I > forgot who) wrote about it here (I think) before.) > > Giampaolo Tomassoni wrote: > > > brand-new domains, > > Something that could work for this without the problems inherent > in using who

R: New domains (was: URIWhois plugin)

2007-09-27 Thread Giampaolo Tomassoni
> -Messaggio originale- > Da: Jonas Eckerman [mailto:[EMAIL PROTECTED] > Inviato: giovedì 27 settembre 2007 18.17 > A: users@spamassassin.apache.org > Oggetto: New domains (was: URIWhois plugin) > > (The idea below is not mine, someone else (I'm sorry, but I &g

New domains (was: URIWhois plugin)

2007-09-27 Thread Jonas Eckerman
(The idea below is not mine, someone else (I'm sorry, but I forgot who) wrote about it here (I think) before.) Giampaolo Tomassoni wrote: brand-new domains, Something that could work for this without the problems inherent in using whois or registry databases is to simply check how long ago