[Mimedefang] Catching the porn spams
WBrown at e1b.org
WBrown at e1b.org
Thu Sep 9 10:33:34 EDT 2004
mimedefang-bounces at lists.roaringpenguin.com wrote on 09/09/2004 01:05:06
AM:
> Is there a way to say "deny email from all domains that are less than 12
> hours old"?
That's an interesting idea! Query a DNS to see if xyz.com is known. If it
isn't, the DNS returns 127.0.0.1 and add it to the database. If it is
known, but for less than some time period - long enough for them to make
it to black lists say 12 or 24 hours, return 127.0.0.2. If it's been
around a while, return 127.0.0.4.
You could reject in the first instance, add a few points in the second,
and process with your normal other tests if the domain has existed for
some time.
More information about the MIMEDefang
mailing list