I wasn't talking about doing huge numbers of whois lookups; I was saying cache the whois lookups in the a uribl dns zone, encoded using regex.

-----Original Message----- From: discuss-bounces@lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Chris Santerre Sent: Monday, May 09, 2005 9:20 AM To: 'SURBL Discussion list' Subject: RE: [SURBL-Discuss] newly registered domains

Because they don't take to kindly to anyone doing tons of whois looksups an hour. Trust me ;)

--Chris

...

-----Original Message----- From: Matthew Wilson [mailto:matthew@boomer.com] Sent: Monday, May 09, 2005 9:44 AM To: SURBL Discussion list Subject: RE: [SURBL-Discuss] newly registered domains

Why not integrate a whois date lookup directly into SURBL or URIBL? Design an encoding system whereby suspectedspammydomain.spammertld.dr.surbl.org (or uribl.com) would return the date somehow regex encoded in the IP address.

Then write a

...

nice SA rule that decodes it, also using regex. Are there any regex geniuses out there that could encode a date in an IP address?

-Matthew