Exactly, and do you have any idea how many of the lookups would be needed per day? I do! Enough to get the uribl dns ip doing the lookups, blocked from the whois servers.
People running the whois servers don't really play nice with others. You need to approach them very carefully. APNIC is not going to be to helpful ;)
--Chris
-----Original Message----- From: Matthew Wilson [mailto:matthew@boomer.com] Sent: Monday, May 09, 2005 1:29 PM To: SURBL Discussion list Subject: RE: [SURBL-Discuss] newly registered domains
I wasn't talking about doing huge numbers of whois lookups; I was saying cache the whois lookups in the a uribl dns zone, encoded using regex.
-----Original Message----- From: discuss-bounces@lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Chris Santerre Sent: Monday, May 09, 2005 9:20 AM To: 'SURBL Discussion list' Subject: RE: [SURBL-Discuss] newly registered domains
Because they don't take to kindly to anyone doing tons of whois looksups an hour. Trust me ;)
--Chris
-----Original Message----- From: Matthew Wilson [mailto:matthew@boomer.com] Sent: Monday, May 09, 2005 9:44 AM To: SURBL Discussion list Subject: RE: [SURBL-Discuss] newly registered domains
Why not integrate a whois date lookup directly into SURBL or URIBL? Design an encoding system whereby suspectedspammydomain.spammertld.dr.surbl.org (or uribl.com) would return the date somehow regex encoded in the IP address.
Then write a
nice SA rule that decodes it, also using regex. Are there
any regex
geniuses out there that could encode a date in an IP address?
-Matthew
Discuss mailing list Discuss@lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss
-
Chris Santerre