Jeff Chan wrote:
On Thursday, June 22, 2006, 10:35:10 AM, Ken A wrote:
Rick Wesson over at Alice's Registry has a dnsrbl listing recently
registered domains (see below). I thought this might be of interest to
SA users. Anyone used this, or other rbl with similar functions?
Scoring?
Accuracy?
Thanks,
Ken A
Pacific.Net
Hi Ken,
I was corresponding with Rick about how to test this and was
going to suggest the developers add a test rule.
# test for Day Old Bread DNSRBL of recently registered domains.
header FROM_IN_DOB
eval:check_rbl_envfrom('dob','dob.sibl.support-intelligence.net.')
describe FROM_IN_DOB Domain recently registered
tflags FROM_IN_DOB net
score FROM_IN_DOB 0.1
This has hit a few spams today. ymmv..
Ken A
Pacific.Net
Jeff C.
__
-------- Original Message --------
Subject: Re: [dns-operations] negative caching of throwaway spam domains
Date: Thu, 22 Jun 2006 09:39:24 -0700
From: Rick Wesson <[EMAIL PROTECTED]>
I've created a DNSRBL called day-old-bread (ok you think of a good name
for it) that contains a running list of domains registered in the last 5
days. It lives at dob.sibl.support-intelligence.net.
a test point is at
test.dob.sibl.support-intelligence.com.dob.sibl.support-intelligence.net.
the data set currently has just the last 2 days worth of domain
registrations.
The run rate will be around 5M domains for 5 days worth of registrations.
I appreciate any thoughts on how useful this might be, and feel free to
let others know the lists exists.
