]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/blob - dnslists.otl
82cf098dbf5c95748d79a9d85d50316e133be57c
[user/henk/docs/dnsbl_notes.git] / dnslists.otl
1 TODO
2         check and link (de)listing policy
3                 NOGO: delisting for money
4         check and link usage policy
5         check and link return codes
6         find newsfeed or mailinglist
7         give feedback?
8         implement in exim
9         implement in SA
10         implement in rspamd
11 implement
12         https://abuse.ro/
13                 policy
14                         spamtraps
15                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
16                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
17                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
18 00_META
19         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
20         http://www.blalert.com/dnsbls
21         http://www.dnsbl.info/dnsbl-list.php
22         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
23         http://www.sdsc.edu/~jeff/spam/cbc.html
24         http://moensted.dk/spam/
25         https://whatismyipaddress.com/blacklist-check
26         https://multirbl.valli.org/
27         https://glockapps.com/blacklist/
28         https://docs.hetrixtools.com/monitored-blacklists/
29         https://www.blacklistmaster.com/
30         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
31         https://github.com/zbetcheckin/DNSBLs
32         https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
33 00_ELANG
34         http://dnsbl.aspnet.hu/
35                 hungarian?
36         http://spam-rbl.fr/
37                 french
38         https://mav.com.br/
39                 maybe? they have antispam but it’s all portugese? or spanish? no idea
40 00_DEAD
41         http://openrbl.org/
42                 as seems dead
43                         404s
44                         wiki is down
45         http://mailhosts.org/
46                 dead
47                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
48         blitzed.org
49                 dead since 2006
50                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
51                                 referenced ML post is 404
52         blackholes.five-ten-sg.com
53                 Offline as of 1/1/2013
54                         https://whatismyipaddress.com/five-ten-sg
55         dynip.rothen.com
56                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
57                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
58         fl.chickenboner.biz
59                 dead since 2011
60                         https://community.spiceworks.com/topic/329762-blacklist-removal
61                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
62                 website contains spam/crap
63         http://cart00ney.surriel.com/
64                 cart00ney.org is dead
65         http://dsbl.org/
66                 points to surriel.com
67         http://csma.biz/
68                 domain is for sale
69                 dead since 2013
70                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
71         http://dnsbl.net.au/
72                 website contains info about living in australia? called "AusBlog"
73                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
74         http://moensted.dk/spam/
75                 dead since 2010
76                 https://moensted.dk/spam/
77         http://rbl.mw-internet.net/
78                 domain was parked
79                 2023: it is an asian(?) gambling(?) website
80         http://www.blackholes.us/
81                 dead since 2009
82                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
83         http://www.deadbeef.com/
84                 dead, no info
85         spamsources.dnsbl.info
86                 dead since 2011 or so
87                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
88         http://www.gweep.ca/
89                 domain dead, no other info
90         http://www.njabl.org/
91                 dead since 2013
92                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
93         http://wytnij.to/
94                 website parked, no other info
95         https://www.transip.nl/
96                 dead since 2013
97                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
98                         https://www.blalert.com/dnsbl/residential.block.transip.nl
99         pss.spambusters.org.ar
100                 NXDOMAIN
101         rbl.snark.net
102                 NXDOMAIN
103                 https://snark.net/ gives access denied
104         whois.rfc-ignorant.org
105                 NXDOMAIN
106                 rfc-ignorant.org registered but no A/AAAA record
107                 dead since 2012
108                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
109                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
110         will-spam-for-food.eu.org
111                 unmaintained
112                 dead
113                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
114         http://proxybl.org/
115                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
116                 https://linuxreviews.org/Mail_Spam_Blacklists
117                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
118         dev.null.dk
119                 timeout, also on the parent null.dk
120                 effectively dead
121         dnsbl.mags.net
122                 seems dead, no info to be found
123                 domain does not respond
124         http://msrbl.blogspot.ch/
125                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
126                 effectively dead
127         http://www.olsentech.net/
128                 strange content on web
129                 effectively dead
130         rbl.orbitrbl.com
131                 http://www.orbitrbl.com/
132                 timeout
133         rbl.polarcomm.net
134                 NXDOMAIN
135                 registered but no A/AAAA record
136         cidr.bl.mcafee.com
137                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
138                         404
139                 no info to be found
140                 dead?
141         http://anti-spam.org.cn/?locale=en_US
142                 unreachable DNS
143         rbl.talkactive.net
144                 seems dead
145                 talkactive.net redirects twice to some hosting company
146                 last listings in 2017
147                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
148                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
149         dnsbl.ipocalypse.net
150                 no policies published
151                 dead
152                         was a private list of an irc network
153                         network was renamed idlechat.net in 2014
154                         became a discord chat in 2022(?)
155         http://blakjak.net/RBL
156                 external access disabled
157                 2023: seems dead, website is a weird error
158                 https://www.blalert.com/dnsbl/rbl.blakjak.net
159                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
160         http://cyberlogic.net/
161                 french (canada)
162                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
163                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
164                 https://www.dnsbl.com/2018/05/
165                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
166         http://www.rbl.jp/allrbl-e.html
167                 website asks for login or just errors
168         http://www.spamhauswhitelist.com/en/
169                 looks like a parked domain with ads
170         http://stopspam.org/rblcheck/index.php
171                 aka dul.pacifier.net
172                 http://www.stopspam.org/rbl-info/
173                         stopped in 2013
174         http://countries.nerd.dk/
175                 unable to connect, also for nerd.dk
176         http://dul.ru/dul.en.html
177                 DEAD for sale
178         http://dns.measurement-factory.com/surveys/openresolvers.html
179                 dead
180                         »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
181         http://www.sectoor.de/tor.php
182                 timeouts
183         http://anticaptcha.net/
184                 for sale
185         http://blacklist.lashback.com/
186                 query zone: ubl.unsubscore.com
187                 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
188                 rsync URLs seem dead, so does the download url
189         http://blacklist.woody.ch/
190                 no entries in the displayed "top 100"
191                 may have been absorbed into the swinog blacklists, see antispam.imp.ch
192         http://cbl.abuseat.org/
193                 https://www.abuseat.org/
194                         changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
195         http://dnsbl.burnt-tech.com/
196                 domain is for sale
197 00_NEEDS_RECHECK
198         https://antispam.imp.ch/
199                 no usage policy
200                 no return code info
201                 no good listing policy
202                 information received from inquiry to provider
203                         website will be updated
204                         return codes
205                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
206                                         127.0.1.8 = default
207                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
208                                         127.0.0.11 => REPO (Email reported as Spam by customer)
209                                 spamrbl.imp.ch (3 days holding time)
210                                         IPs are listed when trying to send mail to the spamtrap mailserver
211                                         MD5 hash: attachment sent to the swinog blacklist
212                                 wormrbl.imp.ch
213                                         DEAD
214         http://blacklist.woody.ch/rblcheck.php3
215                 dead?
216                 waiting for feedback
217         http://dnsbl.iip.lu/
218                 https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
219                         in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
220                 https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
221                         This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
222 00_NEEDS_RESEARCH
223         bl.tiopan.com
224         blocked.hilli.dk
225         dialups.visi.com
226         dnsbl.antispam.or.id
227         dob.sibl.support-intelligence.net
228         intruders.docs.uu.se
229         map.spam-rbl.com
230         rbl.triumf.ca
231         all.s5h.net
232                 http://www.usenix.org.uk/content/rbl.html
233         torexit.dan.me.uk
234         http://pedantic.org/
235                 as of 20140701
236         rbl.fasthosts.co.uk
237                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
238                 seems dead?
239                 https://antispam.fasthosts.co.uk/
240 00_ALIVE
241         00_RECONSIDER
242                 http://barracudacentral.org/rbl
243                         requires account with extensive information (more than spamhaus e.g.):
244                                 your name.
245                                 your company name.
246                                 your phone number.
247                                 your address.
248                                 your city name.
249                                 your state/province name.
250                                 your zip/postal code.
251                                 the name of the alternate contact.
252                                 the phone number of the alternate contact.
253                                 the email address of the alternate contact.
254                         seems well documented
255         00_E_EVIL
256                 sbl.nszones.com
257                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
258         00_E_INFORMATION
259                 blacklist.sci.kun.nl
260                         https://cncz.science.ru.nl/en/howto/email-spam/
261                         not really its own DNSBL?
262                         no usage information
263                         no usage policy
264                 http://anonmails.de/
265                         seems serious but missing necessary info
266                                 usage policy
267                                 listing policy
268                 http://blacklist.jippg.org/
269                         no usage policy
270                         no listing policy
271                         no return code info
272                 bip.virusfree.cz
273                         used by rspamd
274                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
275                 https://www.nixspam.net/
276                         previously http://www.dnsbl.manitu.net/
277                         query zone: ix.dnsbl.manitu.net
278                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
279                         difficult to find info regarding listing policy
280                         asked for more information to be added
281                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
282                 access.redhawk.org
283                         website works but barely any info, not even how to query it
284                         https://www.redhawk.org/?p=64
285                         https://www.redhawk.org/SpamHawk/index.php
286                 https://senderscore.org/
287                         requires registration?
288                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
289                         https://senderscore.org/assess/blocklist-lookup/
290                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
291                         no information how to query found
292                 mail-abuse.org
293                         https://ers.trendmicro.com/
294                         trendmicro paid service
295                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
296                                 »If you don’t create an account, you can still query the reputation of an IP address«
297                         I don’t find any pricing or usage information
298         00_E_PAID
299         00_E_PRIVATE
300                 88.blacklist.zap
301                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
302                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
303                         https://www.blalert.com/dnsbl/88.blacklist.zap
304                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
305                         https://www.dnsbl.com/search/label/frontbridge
306                 http://drmx.org/
307                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
308                 rbl.tdk.net
309                         tdk.net seems dead on http(s)
310                         private
311                                 https://www.blalert.com/dnsbl/rbl.tdk.net
312                         old link: http://postmaster.tdc.dk/publish.php?id=31787
313                                 tdc.dk redirects to yousee.dk
314                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
315                 rbl.zenon.net
316                         private
317                                 https://www.blalert.com/dnsbl/rbl.zenon.net
318                         http://www.noc.zenon.net/rbl/
319                         russian(?)
320                 https://ahbl.org/
321                         was public until 2015
322                         now private, invite-only
323         http://rfc-clueless.org/
324                 lists domains
325                         that do not adhere to common best practices or requirements
326                 does NOT list spammers!
327                 listing criteria are explained well
328                         http://rfc-clueless.org/pages/listing_policy
329                 return codes are explained
330                         http://rfc-clueless.org/
331                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
332                 many timeouts
333                         first noticed in 2014 and deactivated
334                         retried in 2023 and still the case
335         http://spameatingmonkey.com/
336                 lists IPs
337                         that sent backscatter
338                         that sent to spamtrap
339                         added by policy
340                                 this includes dial-up!
341                                 https://spameatingmonkey.com/faq/policy-based-listing
342                 lists domains/URIs
343                         by age
344                         in spam bodies
345                 usage policy seems clear
346                         https://spameatingmonkey.com/faq/query-limits
347                 listing policy seems clear
348                         https://spameatingmonkey.com/services
349                 return codes documented
350                         https://spameatingmonkey.com/services
351                 http://blogspambl.com/
352                         redirects to spameatingmonkey.com
353         http://uribl.com/
354                 lists domains/URIs
355                         that appear in spam bodies
356                         has whitelist
357                 lists IPs
358                         that URIs in spam bodies resolve to
359                 return codes are documented
360                         https://uribl.com/about.shtml#implementation
361                         bitmasked
362                         127.0.0.1 is used to signal abusive query behaviour
363         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
364                 called "hostkarma"
365                 lists domains/URIs
366                 lists IPs
367                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
368                 listing policy is documented
369                 return codes are documented
370                 seems very trustworthy
371         http://www.sorbs.net/
372                 good reputation
373                 lists domains/URIs
374                 lists IPs
375                 usage policy is clear that it’s free
376                 listing policy is documented
377                 return codes are documented
378                 seems trustworthy
379         http://www.spamhaus.org/
380                 good reputation
381                 very well done
382                 seems very professional
383                 lists domains/URIs
384                 lists IPs
385                 usage policy is clear
386                         https://www.spamhaus.org/organization/dnsblusage/
387                 listing policies are clearly documented
388                 return codes are clearly documented
389         http://www.surbl.org/
390                 good reputation
391                 lists domains/URIs
392                 usage policy is clear
393                         https://surbl.org/usage-policy
394                 listing policy is documented
395                 return codes are documented
396                         bitmasked
397                         127.0.0.1 means blocked
398         http://zapbl.net/
399                 lists domains/URIs
400                 lists IPs
401                 listing policy seems clear
402                         https://zapbl.net/policy
403                 usage policy seems clearly free for everyone
404                         https://zapbl.net/using
405                 return codes are documented
406                 seems well done
407         https://rbl.foobar.hu/
408                 lists domains/URIs
409                 lists IPs
410                 listing policy seems clear
411                 usage policy seems clearly free for everyone
412                 return codes are documented
413                 possibly unmaintained or dead
414                         footer says: ©2013-14
415         http://apews.org/?page=filter
416                 questionable
417                         https://www.dnsbl.com/search/label/apews
418                         https://whatismyipaddress.com/apews
419                 dead?
420                         no news on http://apews-user.blogspot.com/ since 2014
421                 not further looked into because of the above
422         https://www.dnswl.org/
423                 seems to be run with best intentions but has had issues from what I have heard from some users
424                 IRC channel has some activity
425                 usage policy relatively clear
426                         free within certain limits
427                 listing policy
428                         self-service
429                 return codes are documented
430         00_E_FOCUS
431                 https://www.dnsblchile.org/index.en.html
432                         chilenian spam so not interesting for me
433                         seems alive
434         00_LISTS_BLOGSPAMMERS
435                 https://www.madavi.de/madavibl/
436                         »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
437                 http://bsb.empty.us/
438                         does not exist anymore
439                         empty.us returns »Nothing here, obviously.«
440         00_LISTS_COUNTRIES
441                 korea
442                         http://korea.services.net/
443         00_LISTS_DIALUPS
444         00_LISTS_OPENRESOLVERS
445         00_LISTS_TORNODES
446                 https://www.dan.me.uk/dnsbl
447         https://0spam.org/
448                 clear information on usage policy
449                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
450                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
451                 seems serious
452                 listing policies are a little less clear
453                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
454                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
455                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
456                 return codes not very clear
457         http://dnsbl.inps.de/
458         http://dnsbl.tornevall.org/
459         http://dronebl.org/
460         http://mailspike.net/usage.html
461         http://psbl.org/
462                 query zone: psbl.surriel.com
463         http://rbl.dns-servicios.com/rbl.php
464         http://rbl.schulte.org/
465         http://rbldata.interserver.net/
466                 may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
467         http://relaytest.kundenserver.de/
468         http://rv-soft.info/
469         http://spamcannibal.org/dnsbl_check.shtml
470         http://spamrats.com/
471         http://spamstinks.com/
472         http://st.technovision.dk/
473         http://tor.efnet.org/
474                 http://rbl.efnetrbl.org/ MIRROR
475         http://v4bl.org/
476         http://virbl.bit.nl/
477         http://wpbl.info/
478         http://www.aupads.org/
479         http://www.backscatterer.org/
480                 fragwuerdige policy - bezahlen fuer schnelleres delisting
481         http://www.blockedservers.com/
482         http://www.blocklist.de/en/index.html
483         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
484         http://www.gbudb.com/truncate/
485         http://www.justspam.org/
486         http://www.kempt.net/dnsbl/
487         http://www.leadmon.net/spamguard/
488         http://www.rbl.jp/allrbl-e.html
489         http://www.spamcop.net/
490                 good policy
491                 good reputation
492         http://www.spamsources.fabel.dk/
493                 sensible policy
494         http://www.srntools.com/blacklist/
495         http://www.uceprotect.net/en/index.php
496         http://www.usenix.org.uk/content/rbl.html
497         http://zapbl.net/
498         https://bl.konstant.no/
499         https://choon.net/rbl.php
500         https://puck.nether.net/or/
501                 might be good
502         https://rbl.foobar.hu/
503         https://www.abuse.ch/
504                 https://www.abuse.ch/?tag=httpbl
505         https://www.kisarbl.or.kr/
506         https://www.megarbl.net/
507         https://www.team-cymru.org/Services/Bogons/dns.html
508         http://mailspike.net/usage.html
509                 reputation-based
510         http://www.spamhauswhitelist.com/en/
511                 policies for listing and usage on the website
512         http://www.whitelisted.org/
513                 paid subscription
514                 policy on site
515         https://puck.nether.net/or/
516                 policies on website
517         https://rbl.foobar.hu/
518                 usage and listing policies on website
519         http://www.isipp.com/email-accreditation/iadb-query-instruction/
520                 requires signup
521         https://choon.net/rbl.php
522                 not quite a usage policy, but seems ok
523                 strange split of ipv4 and ipv6
524                 seems dead?
525         https://www.dnswl.org/