New domains sending spam
sjohnson at edina.k12.mn.us
Fri Apr 15 14:43:20 IST 2011
It looks like day old bread is for 5 days. Many of these sites I'm seeing now are 14-21 days old and when I google them it looks like there's numerous sites being registered by the same person at the same time. Perhaps they are holding onto them now for a couple of weeks before using them?
Anyway to go higher on the date than 5 days?
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Chris Barber
Sent: Thursday, April 14, 2011 12:57 PM
To: MailScanner discussion
Subject: RE: New domains sending spam
I believe there is a spamassassin ruleset that detects this kind of thing. It's called day old bread. I think it's in any modern version of spamassassin already, but you can increase the score of this rule in order to make sure you block messages matching it:
>I've been seeing a lot of new domains pop up and immediately start sending spam.
>In our environment we will almost never get an email from someone on a brand new domain.
>Is there a way to not accept an email from a domain that is say less than 30 days old?
>Environment ->MailScanner, Spamassassin, Postfix
More information about the MailScanner