Re: R: Age of a domain name - a new test?

2006-11-01 Thread Jeff Chan
On Tuesday, October 31, 2006, 11:24:35 AM, John Hardin wrote: On Tue, 31 Oct 2006, Kenneth Porter wrote: --On Tuesday, October 31, 2006 8:28 AM +0100 Giampaolo Tomassoni [EMAIL PROTECTED] wrote: Ok. Why not combine an age check with Hardin's spam-friendly registar plugin? Where can I

Re: R: Age of a domain name - a new test?

2006-11-01 Thread John D. Hardin
On Wed, 1 Nov 2006, Jeff Chan wrote: I haven't really offically released it yet. http://www.impsec.org/~jhardin/SURBL_registrar/ FWIW I attemped to speed read John's code in about 2 seconds but could not determine what ti had to do with SURBLs. Maybe John can clarify? The DNS server

Re: R: Age of a domain name - a new test?

2006-10-31 Thread John D. Hardin
On Mon, 30 Oct 2006, Jeff Chan wrote: On Monday, October 30, 2006, 11:28:39 PM, Giampaolo Tomassoni wrote: Ok. Why not combine an age check with Hardin's spam-friendly registar plugin? I mean, a brand-new domain from a SFR (Spam-friendly registar) is really bad (scores 5?). A

Re: Age of a domain name - a new test?

2006-10-31 Thread Andreas Pettersson
Jeff Chan wrote: Generally speaking whois queries is a poor way to determine domain age, at least for client applications. The whois infrastructure is simply not designed to support the volume of queries required, even if locally cached. Perhaps CRISP is part of the answer to this problem.

Re: R: Age of a domain name - a new test?

2006-10-31 Thread Kenneth Porter
--On Tuesday, October 31, 2006 8:28 AM +0100 Giampaolo Tomassoni [EMAIL PROTECTED] wrote: Ok. Why not combine an age check with Hardin's spam-friendly registar plugin? Where can I find out more about this plugin? I searched the wiki for registrar and it doesn't turn up.

Re: R: Age of a domain name - a new test?

2006-10-31 Thread John D. Hardin
On Tue, 31 Oct 2006, Kenneth Porter wrote: --On Tuesday, October 31, 2006 8:28 AM +0100 Giampaolo Tomassoni [EMAIL PROTECTED] wrote: Ok. Why not combine an age check with Hardin's spam-friendly registar plugin? Where can I find out more about this plugin? I searched the wiki for

Re: R: R: Age of a domain name - a new test?

2006-10-31 Thread John D. Hardin
On Tue, 31 Oct 2006, Giampaolo Tomassoni wrote: Where can I find out more about this plugin? I searched the wiki for registrar and it doesn't turn up. http://www.impsec.org/~jhardin/SURBL_registrar/ It was on an Hardin's message (id [EMAIL PROTECTED]) sent yesterday to this list.

Age of a domain name - a new test?

2006-10-30 Thread Wolfgang Uhr
Hello Sorry for my bad English, I'm German and soory therfore, that possibly I tell you old stories. I've entried this list to translate an idea in the German news group de.admin.net-abuse.mail. This ist not my idea, but of Paul Lenz and I only want to report it. The test contains the

Re: Age of a domain name - a new test?

2006-10-30 Thread John D. Hardin
On Mon, 30 Oct 2006, Wolfgang Uhr wrote: The test contains the examination of all links in the body. You have to get the date of registration and to calculate the age of this urls. There is a URIBL for recently-registered domains - search the list archives for day-old bread. Of course for

RE: Age of a domain name - a new test?

2006-10-30 Thread Chris Santerre
Title: RE: Age of a domain name - a new test? Its also one of the MANY things we look at for URIBL submissions. --Chris

RE: Age of a domain name - a new test?

2006-10-30 Thread John D. Hardin
On Mon, 30 Oct 2006, Chris Santerre wrote: Its also one of the MANY things we look at for URIBL submissions. Good, but a domain has to be submitted to you for URIBL inclusion before you loot at that, no? A plugin would eliminate that on new domains. -- John Hardin KA7OHZICQ#15735746

RE: Age of a domain name - a new test?

2006-10-30 Thread Chris Santerre
Title: RE: Age of a domain name - a new test? -Original Message- From: John D. Hardin [mailto:[EMAIL PROTECTED]] Sent: Monday, October 30, 2006 3:30 PM To: Chris Santerre Cc: Wolfgang Uhr; users@spamassassin.apache.org Subject: RE: Age of a domain name - a new test

Re: Age of a domain name - a new test?

2006-10-30 Thread Daryl C. W. O'Shea
Chris Santerre wrote: -Original Message- From: John D. Hardin [mailto:[EMAIL PROTECTED] Sent: Monday, October 30, 2006 3:30 PM To: Chris Santerre Cc: Wolfgang Uhr; users@spamassassin.apache.org Subject: RE: Age of a domain name - a new test? On Mon, 30 Oct 2006, Chris

RE: Age of a domain name - a new test?

2006-10-30 Thread John D. Hardin
On Mon, 30 Oct 2006, Chris Santerre wrote: A plugin would eliminate that on new domains. Hell, I'd love to see it as well. Except this data alone does not make a domain evil. It just increases the chances that it is evil. And where would you get this info? How would you feed this list.

RE: Age of a domain name - a new test?

2006-10-30 Thread Mark
-Original Message- From: Wolfgang Uhr [mailto:[EMAIL PROTECTED] Sent: maandag 30 oktober 2006 19:05 To: users@spamassassin.apache.org Subject: Age of a domain name - a new test? I'm surprised people are so positive about this. Not that I'm negative about it per se, but I have

RE: Age of a domain name - a new test?

2006-10-30 Thread Ring, John C
From: Chris Santerre [mailto:[EMAIL PROTECTED] Hell, I'd love to see it as well. Except this data alone does not make a domain evil. It just increases the chances that it is evil. And where would you get this info? How would you feed this list. dailychanges.com? Essentially you are looking at

Re: Age of a domain name - a new test?

2006-10-30 Thread Jeff Chan
On Monday, October 30, 2006, 9:56:49 AM, Wolfgang Uhr wrote: The test contains the examination of all links in the body. You have to get the date of registration and to calculate the age of this urls. Of course for practal use you have to cache thoose whois-requests onto a central server and

R: Age of a domain name - a new test?

2006-10-30 Thread Giampaolo Tomassoni
Generally speaking whois queries is a poor way to determine domain age, at least for client applications. The whois infrastructure is simply not designed to support the volume of queries required, even if locally cached. Other problems: 1. Inconsistent record formats 2. Rate limits

Re: R: Age of a domain name - a new test?

2006-10-30 Thread Jeff Chan
On Monday, October 30, 2006, 11:28:39 PM, Giampaolo Tomassoni wrote: Ok. Why not combine an age check with Hardin's spam-friendly registar plugin? I mean, a brand-new domain from a SFR (Spam-friendly registar) is really bad (scores 5?). A brand-new domain from a non-SFR is not that bad

R: R: Age of a domain name - a new test?

2006-10-30 Thread Giampaolo Tomassoni
On Monday, October 30, 2006, 11:28:39 PM, Giampaolo Tomassoni wrote: Ok. Why not combine an age check with Hardin's spam-friendly registar plugin? I mean, a brand-new domain from a SFR (Spam-friendly registar) is really bad (scores 5?). A brand-new domain from a non-SFR is not

R: R: Age of a domain name - a new test?

2006-10-30 Thread Giampaolo Tomassoni
On Monday, October 30, 2006, 11:28:39 PM, Giampaolo Tomassoni wrote: Ok. Why not combine an age check with Hardin's spam-friendly registar plugin? I mean, a brand-new domain from a SFR (Spam-friendly registar) is really bad (scores 5?). A brand-new domain from a non-SFR is not