New domains sending spam

Johnson, SE sjohnson at
Fri Apr 15 14:43:20 IST 2011

It looks like day old bread is for 5 days.  Many of these sites I'm seeing now are 14-21 days old and when I google them it looks like there's numerous sites being registered by the same person at the same time.  Perhaps they are holding onto them now for a couple of weeks before using them?

Anyway to go higher on the date than 5 days?

-----Original Message-----
From: mailscanner-bounces at [mailto:mailscanner-bounces at] On Behalf Of Chris Barber
Sent: Thursday, April 14, 2011 12:57 PM
To: MailScanner discussion
Subject: RE: New domains sending spam

I believe there is a spamassassin ruleset that detects this kind of thing. It's called day old bread. I think it's in any modern version of spamassassin already, but you can increase the score of this rule in order to make sure you block messages matching it:


>I've been seeing a lot of new domains pop up and immediately start sending spam.
>In our environment we will almost never get an email from someone on a brand new domain.  
>Is there a way to not accept an email from a domain that is say less than 30 days old?
>Environment ->MailScanner, Spamassassin, Postfix
  > Scott

More information about the MailScanner mailing list