Milter-greylist

Thanks Ron, that's close to what I'm looking for.  It appears that DOB 
is an RBL that lists recent domain additions.  I'm not sure which one 
Spammassin uses. For instance the following got through on my system:

X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00,HTML_IMAGE_RATIO_06,
	HTML_MESSAGE,HTML_TITLE_SUBJ_DIFF,MPART_ALT_DIFF_COUNT autolearn=no
	version=3.2.4

Received: from rs4.vparseals.com (rs4.vparseals.com [64.187.98.73])

But is listed on a blacklist mentioned here:

http://www.nabble.com/I%27ve-created-a-new-Day-Old-Bread-type-list-RBL-tt19531901.html

I'm already running SA from procmail, but would like to run it as part 
of mgl.  I'll do that and check out Petar's suggestions.

Thanks

Ron Wilhoite wrote:
>
> On 09/26/2008 12:47 PM Mark Walker wrote:
> > I've been having a lot of multiple attempt spam that's coming from
> > domain names that have been created in the last 2 months.
> >
> > Is there any way to look up a domain name to see when the name was
> > created? Whois services will only let you look up a few names before
> > blocking you.
>
> Don't know if this helps, but spamassassin has "Day Old Bread" rules:
>
> updates_spamassassin_org/72_active.cf:##{ DNS_FROM_DOB
> updates_spamassassin_org/72_active.cf:header DNS_FROM_DOB
> eval:check_rbl_envfrom('dob','dob.sibl.support-intelligence.net.')
>
>