uribl.com, as data

If you are receiving spam with new TLDs such as .ICU, please make sure you are running SpamAssassin v3.4.1 or higher, and have executed an sa-update to get the latest 20_aux_tlds.cf.[root@mail updates_spamassassin_org]# grep icu 20_aux_tlds.cf[root@mail updates_spamassassin_org]# sa-updateutil_rb_tld ice **icu** id ie ieee ifm ikano il im imamat imdb immo immobilien in incFor those that cannot update spamassassin versions, please see old news below **April 6, 2015: New TLD Spam** for details on how to update your TLDs.* **October 9, 2015: Improve URIBL hitrates w/ SMTP delays**As discussed below, the short lived, high-volume campaigns are becoming a new norm to try to avoid RBLs and URIBLs alike. Because real-time blacklist services are mostly reactive in nature, these short high volume campaigns can sneak by 10-30% of the spam run before blacklistings kick in.A nice tactic to counter these efforts, is to use SMTP delays. By introducing a delay, you allow real-time blacklists a small window for identification and publication of the new information. It will also drop quite a few spam bots which dont want to hang around that long for an SMTP banner. Not all MTA's may have this ability, but if you run Exim, its super easy. Just add to your **acl_smtp_connect** in **/etc/exim.conf**Note, this will effectively delay all your incoming mail by 60 seconds, and may increase your SMTP concurrencies, so please monitor accordingly.In **postfix 2.3+** you can inject sleep in your smtpd_client_restrictions to induce some delay, but that will only help DNS lookups that occur after rcpt to: (ie SpamAssassin at queue level). To give delay to connection time RBL lookups prior to EHLO, you will want to move to postfix 2.8+ and use postscreen (greet pause) to accomplish this.If you have implemented SMTP delays on other MTAs and would like to share them with us, please [contact us](<mailto:datafeed@uribl.com?Subject=MTA SMTP DElays>) and let us know.