dnslists.otl

   1 TODO
   2         check and link (de)listing policy
   3                 NOGO: delisting for money
   4         check and link usage policy
   5         check and link return codes
   6         find newsfeed or mailinglist
   7         give feedback?
   8         implement in exim
   9         implement in SA
  10         implement in rspamd
  11 implement
  12         https://abuse.ro/
  13                 policy
  14                         spamtraps
  15                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
  16                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
  17                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
  18 00_META
  19         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
  20         http://www.blalert.com/dnsbls
  21         http://www.dnsbl.info/dnsbl-list.php
  22         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
  23         http://www.sdsc.edu/~jeff/spam/cbc.html
  24         http://moensted.dk/spam/
  25         https://whatismyipaddress.com/blacklist-check
  26         https://multirbl.valli.org/
  27         https://glockapps.com/blacklist/
  28         https://docs.hetrixtools.com/monitored-blacklists/
  29         https://www.blacklistmaster.com/
  30         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
  31         https://github.com/zbetcheckin/DNSBLs
  32         https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
  33 00_ELANG
  34         http://dnsbl.aspnet.hu/
  35                 hungarian?
  36         http://spam-rbl.fr/
  37                 french
  38         https://mav.com.br/
  39                 maybe? they have antispam but it’s all portugese? or spanish? no idea
  40 00_DEAD
  41         http://openrbl.org/
  42                 as seems dead
  43                         404s
  44                         wiki is down
  45         http://mailhosts.org/
  46                 dead
  47                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
  48         blitzed.org
  49                 dead since 2006
  50                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
  51                                 referenced ML post is 404
  52         blackholes.five-ten-sg.com
  53                 Offline as of 1/1/2013
  54                         https://whatismyipaddress.com/five-ten-sg
  55         dynip.rothen.com
  56                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
  57                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
  58         fl.chickenboner.biz
  59                 dead since 2011
  60                         https://community.spiceworks.com/topic/329762-blacklist-removal
  61                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
  62                 website contains spam/crap
  63         http://cart00ney.surriel.com/
  64                 cart00ney.org is dead
  65         http://dsbl.org/
  66                 points to surriel.com
  67         http://csma.biz/
  68                 domain is for sale
  69                 dead since 2013
  70                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
  71         http://dnsbl.net.au/
  72                 website contains info about living in australia? called "AusBlog"
  73                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
  74         http://moensted.dk/spam/
  75                 dead since 2010
  76                 https://moensted.dk/spam/
  77         http://rbl.mw-internet.net/
  78                 domain was parked
  79                 2023: it is an asian(?) gambling(?) website
  80         http://www.blackholes.us/
  81                 dead since 2009
  82                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
  83         http://www.deadbeef.com/
  84                 dead, no info
  85         spamsources.dnsbl.info
  86                 dead since 2011 or so
  87                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
  88         http://www.gweep.ca/
  89                 domain dead, no other info
  90         http://www.njabl.org/
  91                 dead since 2013
  92                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
  93         http://wytnij.to/
  94                 website parked, no other info
  95         https://www.transip.nl/
  96                 dead since 2013
  97                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
  98                         https://www.blalert.com/dnsbl/residential.block.transip.nl
  99         pss.spambusters.org.ar
 100                 NXDOMAIN
 101         rbl.snark.net
 102                 NXDOMAIN
 103                 https://snark.net/ gives access denied
 104         whois.rfc-ignorant.org
 105                 NXDOMAIN
 106                 rfc-ignorant.org registered but no A/AAAA record
 107                 dead since 2012
 108                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
 109                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
 110         will-spam-for-food.eu.org
 111                 unmaintained
 112                 dead
 113                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
 114         http://proxybl.org/
 115                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
 116                 https://linuxreviews.org/Mail_Spam_Blacklists
 117                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
 118         dev.null.dk
 119                 timeout, also on the parent null.dk
 120                 effectively dead
 121         dnsbl.mags.net
 122                 seems dead, no info to be found
 123                 domain does not respond
 124         http://msrbl.blogspot.ch/
 125                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
 126                 effectively dead
 127         http://www.olsentech.net/
 128                 strange content on web
 129                 effectively dead
 130         rbl.orbitrbl.com
 131                 http://www.orbitrbl.com/
 132                 timeout
 133         rbl.polarcomm.net
 134                 NXDOMAIN
 135                 registered but no A/AAAA record
 136         cidr.bl.mcafee.com
 137                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
 138                         404
 139                 no info to be found
 140                 dead?
 141         http://anti-spam.org.cn/?locale=en_US
 142                 unreachable DNS
 143         rbl.talkactive.net
 144                 seems dead
 145                 talkactive.net redirects twice to some hosting company
 146                 last listings in 2017
 147                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
 148                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
 149         dnsbl.ipocalypse.net
 150                 no policies published
 151                 dead
 152                         was a private list of an irc network
 153                         network was renamed idlechat.net in 2014
 154                         became a discord chat in 2022(?)
 155         http://blakjak.net/RBL
 156                 external access disabled
 157                 2023: seems dead, website is a weird error
 158                 https://www.blalert.com/dnsbl/rbl.blakjak.net
 159                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
 160         http://cyberlogic.net/
 161                 french (canada)
 162                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
 163                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
 164                 https://www.dnsbl.com/2018/05/
 165                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
 166         http://www.rbl.jp/allrbl-e.html
 167                 website asks for login or just errors
 168         http://www.spamhauswhitelist.com/en/
 169                 looks like a parked domain with ads
 170         http://stopspam.org/rblcheck/index.php
 171                 aka dul.pacifier.net
 172                 http://www.stopspam.org/rbl-info/
 173                         stopped in 2013
 174         http://countries.nerd.dk/
 175                 unable to connect, also for nerd.dk
 176         http://dul.ru/dul.en.html
 177                 DEAD for sale
 178         http://dns.measurement-factory.com/surveys/openresolvers.html
 179                 dead
 180                         »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
 181 00_NEEDS_RECHECK
 182         https://antispam.imp.ch/
 183                 no usage policy
 184                 no return code info
 185                 no good listing policy
 186                 information received from inquiry to provider
 187                         website will be updated
 188                         return codes
 189                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
 190                                         127.0.1.8 = default
 191                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
 192                                         127.0.0.11 => REPO (Email reported as Spam by customer)
 193                                 spamrbl.imp.ch (3 days holding time)
 194                                         IPs are listed when trying to send mail to the spamtrap mailserver
 195                                         MD5 hash: attachment sent to the swinog blacklist
 196                                 wormrbl.imp.ch
 197                                         DEAD
 198         http://blacklist.woody.ch/rblcheck.php3
 199                 dead?
 200                 waiting for feedback
 201 00_NEEDS_RESEARCH
 202         bl.tiopan.com
 203         blocked.hilli.dk
 204         dialups.visi.com
 205         dnsbl.antispam.or.id
 206         dob.sibl.support-intelligence.net
 207         intruders.docs.uu.se
 208         map.spam-rbl.com
 209         rbl.triumf.ca
 210         all.s5h.net
 211                 http://www.usenix.org.uk/content/rbl.html
 212         torexit.dan.me.uk
 213         http://pedantic.org/
 214                 as of 20140701
 215         rbl.fasthosts.co.uk
 216                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
 217                 seems dead?
 218                 https://antispam.fasthosts.co.uk/
 219 00_ALIVE
 220         00_RECONSIDER
 221                 http://barracudacentral.org/rbl
 222                         requires account with extensive information (more than spamhaus e.g.):
 223                                 your name.
 224                                 your company name.
 225                                 your phone number.
 226                                 your address.
 227                                 your city name.
 228                                 your state/province name.
 229                                 your zip/postal code.
 230                                 the name of the alternate contact.
 231                                 the phone number of the alternate contact.
 232                                 the email address of the alternate contact.
 233                         seems well documented
 234         00_E_EVIL
 235                 sbl.nszones.com
 236                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
 237         00_E_INFORMATION
 238                 blacklist.sci.kun.nl
 239                         https://cncz.science.ru.nl/en/howto/email-spam/
 240                         not really its own DNSBL?
 241                         no usage information
 242                         no usage policy
 243                 http://anonmails.de/
 244                         seems serious but missing necessary info
 245                                 usage policy
 246                                 listing policy
 247                 http://blacklist.jippg.org/
 248                         no usage policy
 249                         no listing policy
 250                         no return code info
 251                 bip.virusfree.cz
 252                         used by rspamd
 253                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
 254                 https://www.nixspam.net/
 255                         previously http://www.dnsbl.manitu.net/
 256                         query zone: ix.dnsbl.manitu.net
 257                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
 258                         difficult to find info regarding listing policy
 259                         asked for more information to be added
 260                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
 261                 access.redhawk.org
 262                         website works but barely any info, not even how to query it
 263                         https://www.redhawk.org/?p=64
 264                         https://www.redhawk.org/SpamHawk/index.php
 265                 https://senderscore.org/
 266                         requires registration?
 267                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
 268                         https://senderscore.org/assess/blocklist-lookup/
 269                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
 270                         no information how to query found
 271                 mail-abuse.org
 272                         https://ers.trendmicro.com/
 273                         trendmicro paid service
 274                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
 275                                 »If you don’t create an account, you can still query the reputation of an IP address«
 276                         I don’t find any pricing or usage information
 277         00_E_PAID
 278         00_E_PRIVATE
 279                 88.blacklist.zap
 280                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
 281                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
 282                         https://www.blalert.com/dnsbl/88.blacklist.zap
 283                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
 284                         https://www.dnsbl.com/search/label/frontbridge
 285                 http://drmx.org/
 286                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
 287                 rbl.tdk.net
 288                         tdk.net seems dead on http(s)
 289                         private
 290                                 https://www.blalert.com/dnsbl/rbl.tdk.net
 291                         old link: http://postmaster.tdc.dk/publish.php?id=31787
 292                                 tdc.dk redirects to yousee.dk
 293                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
 294                 rbl.zenon.net
 295                         private
 296                                 https://www.blalert.com/dnsbl/rbl.zenon.net
 297                         http://www.noc.zenon.net/rbl/
 298                         russian(?)
 299                 https://ahbl.org/
 300                         was public until 2015
 301                         now private, invite-only
 302         http://rfc-clueless.org/
 303                 lists domains
 304                         that do not adhere to common best practices or requirements
 305                 does NOT list spammers!
 306                 listing criteria are explained well
 307                         http://rfc-clueless.org/pages/listing_policy
 308                 return codes are explained
 309                         http://rfc-clueless.org/
 310                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
 311                 many timeouts
 312                         first noticed in 2014 and deactivated
 313                         retried in 2023 and still the case
 314         http://spameatingmonkey.com/
 315                 lists IPs
 316                         that sent backscatter
 317                         that sent to spamtrap
 318                         added by policy
 319                                 this includes dial-up!
 320                                 https://spameatingmonkey.com/faq/policy-based-listing
 321                 lists domains/URIs
 322                         by age
 323                         in spam bodies
 324                 usage policy seems clear
 325                         https://spameatingmonkey.com/faq/query-limits
 326                 listing policy seems clear
 327                         https://spameatingmonkey.com/services
 328                 return codes documented
 329                         https://spameatingmonkey.com/services
 330                 http://blogspambl.com/
 331                         redirects to spameatingmonkey.com
 332         http://uribl.com/
 333                 lists domains/URIs
 334                         that appear in spam bodies
 335                         has whitelist
 336                 lists IPs
 337                         that URIs in spam bodies resolve to
 338                 return codes are documented
 339                         https://uribl.com/about.shtml#implementation
 340                         bitmasked
 341                         127.0.0.1 is used to signal abusive query behaviour
 342         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
 343                 called "hostkarma"
 344                 lists domains/URIs
 345                 lists IPs
 346                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
 347                 listing policy is documented
 348                 return codes are documented
 349                 seems very trustworthy
 350         http://www.sorbs.net/
 351                 good reputation
 352                 lists domains/URIs
 353                 lists IPs
 354                 usage policy is clear that it’s free
 355                 listing policy is documented
 356                 return codes are documented
 357                 seems trustworthy
 358         http://www.spamhaus.org/
 359                 good reputation
 360                 very well done
 361                 seems very professional
 362                 lists domains/URIs
 363                 lists IPs
 364                 usage policy is clear
 365                         https://www.spamhaus.org/organization/dnsblusage/
 366                 listing policies are clearly documented
 367                 return codes are clearly documented
 368         http://www.surbl.org/
 369                 good reputation
 370                 lists domains/URIs
 371                 usage policy is clear
 372                         https://surbl.org/usage-policy
 373                 listing policy is documented
 374                 return codes are documented
 375                         bitmasked
 376                         127.0.0.1 means blocked
 377         http://zapbl.net/
 378                 lists domains/URIs
 379                 lists IPs
 380                 listing policy seems clear
 381                         https://zapbl.net/policy
 382                 usage policy seems clearly free for everyone
 383                         https://zapbl.net/using
 384                 return codes are documented
 385                 seems well done
 386         https://rbl.foobar.hu/
 387                 lists domains/URIs
 388                 lists IPs
 389                 listing policy seems clear
 390                 usage policy seems clearly free for everyone
 391                 return codes are documented
 392                 possibly unmaintained or dead
 393                         footer says: ©2013-14
 394         http://apews.org/?page=filter
 395                 questionable
 396                         https://www.dnsbl.com/search/label/apews
 397                         https://whatismyipaddress.com/apews
 398                 dead?
 399                         no news on http://apews-user.blogspot.com/ since 2014
 400                 not further looked into because of the above
 401         https://www.dnswl.org/
 402                 seems to be run with best intentions but has had issues from what I have heard from some users
 403                 IRC channel has some activity
 404                 usage policy relatively clear
 405                         free within certain limits
 406                 listing policy
 407                         self-service
 408                 return codes are documented
 409         00_E_FOCUS
 410                 https://www.dnsblchile.org/index.en.html
 411                         chilenian spam so not interesting for me
 412                         seems alive
 413         00_LISTS_BLOGSPAMMERS
 414                 https://www.madavi.de/madavibl/
 415                         »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
 416                 http://bsb.empty.us/
 417                         does not exist anymore
 418                         empty.us returns »Nothing here, obviously.«
 419         00_LISTS_COUNTRIES
 420                 korea
 421                         http://korea.services.net/
 422         00_LISTS_DIALUPS
 423         00_LISTS_OPENRESOLVERS
 424         00_LISTS_TORNODES
 425                 http://www.sectoor.de/tor.php
 426                 https://www.dan.me.uk/dnsbl
 427         https://0spam.org/
 428                 clear information on usage policy
 429                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
 430                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
 431                 seems serious
 432                 listing policies are a little less clear
 433                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
 434                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
 435                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
 436                 return codes not very clear
 437         http://anticaptcha.net/
 438         http://blacklist.lashback.com/
 439                 http://ubl.unsubscore.com
 440         http://blacklist.woody.ch/rblcheck.php3
 441         http://cbl.abuseat.org/
 442         http://dnsbl.burnt-tech.com/
 443         http://dnsbl.iip.lu/
 444         http://dnsbl.inps.de/
 445         http://dnsbl.tornevall.org/
 446         http://dronebl.org/
 447         http://mailspike.net/usage.html
 448         http://psbl.org/
 449                 query zone: psbl.surriel.com
 450         http://rbl.dns-servicios.com/rbl.php
 451         http://rbl.schulte.org/
 452         http://rbldata.interserver.net/
 453                 may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
 454         http://relaytest.kundenserver.de/
 455         http://rv-soft.info/
 456         http://spamcannibal.org/dnsbl_check.shtml
 457         http://spamrats.com/
 458         http://spamstinks.com/
 459         http://st.technovision.dk/
 460         http://tor.efnet.org/
 461                 http://rbl.efnetrbl.org/ MIRROR
 462         http://v4bl.org/
 463         http://virbl.bit.nl/
 464         http://wpbl.info/
 465         http://www.aupads.org/
 466         http://www.backscatterer.org/
 467                 fragwuerdige policy - bezahlen fuer schnelleres delisting
 468         http://www.blockedservers.com/
 469         http://www.blocklist.de/en/index.html
 470         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
 471         http://www.gbudb.com/truncate/
 472         http://www.justspam.org/
 473         http://www.kempt.net/dnsbl/
 474         http://www.leadmon.net/spamguard/
 475         http://www.rbl.jp/allrbl-e.html
 476         http://www.spamcop.net/
 477                 good policy
 478                 good reputation
 479         http://www.spamsources.fabel.dk/
 480                 sensible policy
 481         http://www.srntools.com/blacklist/
 482         http://www.uceprotect.net/en/index.php
 483         http://www.usenix.org.uk/content/rbl.html
 484         http://zapbl.net/
 485         https://bl.konstant.no/
 486         https://choon.net/rbl.php
 487         https://puck.nether.net/or/
 488                 might be good
 489         https://rbl.foobar.hu/
 490         https://www.abuse.ch/
 491                 https://www.abuse.ch/?tag=httpbl
 492         https://www.kisarbl.or.kr/
 493         https://www.megarbl.net/
 494         https://www.team-cymru.org/Services/Bogons/dns.html
 495         http://mailspike.net/usage.html
 496                 reputation-based
 497         http://www.spamhauswhitelist.com/en/
 498                 policies for listing and usage on the website
 499         http://www.whitelisted.org/
 500                 paid subscription
 501                 policy on site
 502         https://puck.nether.net/or/
 503                 policies on website
 504         https://rbl.foobar.hu/
 505                 usage and listing policies on website
 506         http://www.isipp.com/email-accreditation/iadb-query-instruction/
 507                 requires signup
 508         https://choon.net/rbl.php
 509                 not quite a usage policy, but seems ok
 510                 strange split of ipv4 and ipv6
 511                 seems dead?
 512         https://www.dnswl.org/