Print Page | Close Window

Filter by domain registrar?

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5673
Printed Date: 17 October 2017 at 5:45am


Topic: Filter by domain registrar?
Posted By: Alan
Subject: Filter by domain registrar?
Date Posted: 20 June 2006 at 10:38am
I am curious would it be feasible to filter based on a domain registrar's country?  Basically anyone who is bulk registering domain names from a Chinese or Russian registrar is probably a spammer or host. 

I don;t know that this is possible or if it would even make sense but thought I would toss it in the hat...



Replies:
Posted By: lyndonje
Date Posted: 20 June 2006 at 11:08am
Im sure its possible but would imagine its quite difficult to do and probably not that benificial, and be heavy on resources.

First you'd need a difinative list of registrars for all domain suffixes, and the Countries they are in.

Then you'd need to perform WHOIS lookups on all sender domains and parse the registrar part.

If in the future the WHOIS output was to change, the parse wouldn't work, meaning a patch for SF.

And how many emails would this actually stop that you arn't already catching? I wouldn't have thought it wouldn't be worth the additional overhead to perform this test.

Just my thoughts...




Posted By: lyndonje
Date Posted: 20 June 2006 at 11:11am
Another though... if this kind of test was to become common place, the spammers (the ones that actually go to the effort of registering their own domains instead of forging others) would start to use major registrars instead that you wouldn't commercially be able to block.


Posted By: Roman
Date Posted: 21 June 2006 at 7:39am
100% useless. I can use any registrar (US, Europe and so on) with my VISA card.



Print Page | Close Window