[76431] in North American Network Operators' Group
Re: no whois info ?
daemon@ATHENA.MIT.EDU (Elmar K. Bins)
Fri Dec 10 05:22:18 2004
Date: Fri, 10 Dec 2004 11:21:53 +0100
From: "Elmar K. Bins" <elmi@4ever.de>
To: Peter Corlett <abuse@cabal.org.uk>
Cc: nanog@nanog.org
In-Reply-To: <cpbt0q$ud4$1@dopiaza.cabal.org.uk>
Errors-To: owner-nanog-outgoing@merit.edu
abuse@cabal.org.uk (Peter Corlett) wrote:
>
> william(at)elan.net <william@elan.net> wrote:
> [...]
> > Read NANOG archives - Verisign now allows immediate (well, within
> > about 10 minutes) updates of .com/.net zones (also same for .biz)
> > while whois data is still updated once or twice a day. That means if
> > spammer registers new domain he'll be able to use it immediatly and
> > it'll not yet show up in whois (and so not be immediatly
> > identifiable to spam reporting tools) - and spammers are in fact
> > using this "feature" more and more!
>
> This tempts me to hack something into Exim that does a whois on
> previously-unseen sender domains, and give a deferral if the whois
> denies existence of the domain. Is this likely to have any meaningful
> effect?
No. It depends too much on
(a) the registry and registrar for the domain
(b) overall whois availability to that TLD (not everybody uses whois)
(c) your connectivity to the whois servers involved (possibly more than one)
Yours,
Elmar.
--
"Begehe nur nicht den Fehler, Meinung durch Sachverstand zu substituieren."
(PLemken, <bu6o7e$e6v0p$2@ID-31.news.uni-berlin.de>)
--------------------------------------------------------------[ ELMI-RIPE ]---
