]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/blob - dnslists.otl
d3afe8ee1b86b85f1d84be2e2a6a47c2a7f84917
[user/henk/docs/dnsbl_notes.git] / dnslists.otl
1 TODO
2         check and link (de)listing policy
3                 NOGO: delisting for money
4         check and link usage policy
5         check and link return codes
6         find newsfeed or mailinglist
7         give feedback?
8         implement in exim
9         implement in SA
10         implement in rspamd
11 implement
12         https://abuse.ro/
13                 policy
14                         spamtraps
15                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
16                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
17                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
18 00_META
19         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
20         http://www.blalert.com/dnsbls
21         http://www.dnsbl.info/dnsbl-list.php
22         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
23         http://www.sdsc.edu/~jeff/spam/cbc.html
24         http://moensted.dk/spam/
25         https://whatismyipaddress.com/blacklist-check
26         https://multirbl.valli.org/
27         https://glockapps.com/blacklist/
28         https://docs.hetrixtools.com/monitored-blacklists/
29         https://www.blacklistmaster.com/
30         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
31         https://github.com/zbetcheckin/DNSBLs
32 00_ELANG
33         http://dnsbl.aspnet.hu/
34                 hungarian?
35         http://spam-rbl.fr/
36                 french
37         https://mav.com.br/
38                 maybe? they have antispam but it’s all portugese? or spanish? no idea
39 00_DEAD
40         http://openrbl.org/
41                 as seems dead
42                         404s
43                         wiki is down
44         http://mailhosts.org/
45                 dead
46                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
47         blitzed.org
48                 dead since 2006
49                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
50                                 referenced ML post is 404
51         blackholes.five-ten-sg.com
52                 Offline as of 1/1/2013
53                         https://whatismyipaddress.com/five-ten-sg
54         dynip.rothen.com
55                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
56                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
57         fl.chickenboner.biz
58                 dead since 2011
59                         https://community.spiceworks.com/topic/329762-blacklist-removal
60                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
61                 website contains spam/crap
62         http://cart00ney.surriel.com/
63                 cart00ney.org is dead
64         http://dsbl.org/
65                 points to surriel.com
66         http://csma.biz/
67                 domain is for sale
68                 dead since 2013
69                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
70         http://dnsbl.net.au/
71                 website contains info about living in australia? called "AusBlog"
72                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
73         http://moensted.dk/spam/
74                 dead since 2010
75                 https://moensted.dk/spam/
76         http://rbl.mw-internet.net/
77                 domain was parked
78                 2023: it is an asian(?) gambling(?) website
79         http://www.blackholes.us/
80                 dead since 2009
81                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
82         http://www.deadbeef.com/
83                 dead, no info
84         spamsources.dnsbl.info
85                 dead since 2011 or so
86                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
87         http://www.gweep.ca/
88                 domain dead, no other info
89         http://www.njabl.org/
90                 dead since 2013
91                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
92         http://wytnij.to/
93                 website parked, no other info
94         https://www.transip.nl/
95                 dead since 2013
96                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
97                         https://www.blalert.com/dnsbl/residential.block.transip.nl
98         pss.spambusters.org.ar
99                 NXDOMAIN
100         rbl.snark.net
101                 NXDOMAIN
102                 https://snark.net/ gives access denied
103         whois.rfc-ignorant.org
104                 NXDOMAIN
105                 rfc-ignorant.org registered but no A/AAAA record
106                 dead since 2012
107                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
108                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
109         will-spam-for-food.eu.org
110                 unmaintained
111                 dead
112                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
113         http://proxybl.org/
114                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
115                 https://linuxreviews.org/Mail_Spam_Blacklists
116                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
117         dev.null.dk
118                 timeout, also on the parent null.dk
119                 effectively dead
120         dnsbl.mags.net
121                 seems dead, no info to be found
122                 domain does not respond
123         http://msrbl.blogspot.ch/
124                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
125                 effectively dead
126         http://www.olsentech.net/
127                 strange content on web
128                 effectively dead
129         rbl.orbitrbl.com
130                 http://www.orbitrbl.com/
131                 timeout
132         rbl.polarcomm.net
133                 NXDOMAIN
134                 registered but no A/AAAA record
135         cidr.bl.mcafee.com
136                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
137                         404
138                 no info to be found
139                 dead?
140         http://anti-spam.org.cn/?locale=en_US
141                 unreachable DNS
142         rbl.talkactive.net
143                 seems dead
144                 talkactive.net redirects twice to some hosting company
145                 last listings in 2017
146                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
147                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
148         dnsbl.ipocalypse.net
149                 no policies published
150                 dead
151                         was a private list of an irc network
152                         network was renamed idlechat.net in 2014
153                         became a discord chat in 2022(?)
154         http://blakjak.net/RBL
155                 external access disabled
156                 2023: seems dead, website is a weird error
157                 https://www.blalert.com/dnsbl/rbl.blakjak.net
158                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
159         http://cyberlogic.net/
160                 french (canada)
161                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
162                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
163                 https://www.dnsbl.com/2018/05/
164                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
165         http://www.rbl.jp/allrbl-e.html
166                 website asks for login or just errors
167 00_NEEDS_RECHECK
168         https://antispam.imp.ch/
169                 no usage policy
170                 no return code info
171                 no good listing policy
172                 information received from inquiry to provider
173                         website will be updated
174                         return codes
175                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
176                                         127.0.1.8 = default
177                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
178                                         127.0.0.11 => REPO (Email reported as Spam by customer)
179                                 spamrbl.imp.ch (3 days holding time)
180                                         IPs are listed when trying to send mail to the spamtrap mailserver
181                                         MD5 hash: attachment sent to the swinog blacklist
182                                 wormrbl.imp.ch
183                                         DEAD
184         http://blacklist.woody.ch/rblcheck.php3
185                 dead?
186                 waiting for feedback
187 00_NEEDS_RESEARCH
188         bl.tiopan.com
189         blocked.hilli.dk
190         dialups.visi.com
191         dnsbl.antispam.or.id
192         dob.sibl.support-intelligence.net
193         intruders.docs.uu.se
194         map.spam-rbl.com
195         rbl.triumf.ca
196         all.s5h.net
197                 http://www.usenix.org.uk/content/rbl.html
198         torexit.dan.me.uk
199         http://pedantic.org/
200                 as of 20140701
201         rbl.fasthosts.co.uk
202                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
203                 seems dead?
204                 https://antispam.fasthosts.co.uk/
205 00_ALIVE
206         00_RECONSIDER
207                 http://barracudacentral.org/rbl
208                         requires account with extensive information (more than spamhaus e.g.):
209                                 your name.
210                                 your company name.
211                                 your phone number.
212                                 your address.
213                                 your city name.
214                                 your state/province name.
215                                 your zip/postal code.
216                                 the name of the alternate contact.
217                                 the phone number of the alternate contact.
218                                 the email address of the alternate contact.
219                         seems well documented
220         00_E_EVIL
221                 sbl.nszones.com
222                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
223         00_E_INFORMATION
224                 blacklist.sci.kun.nl
225                         https://cncz.science.ru.nl/en/howto/email-spam/
226                         not really its own DNSBL?
227                         no usage information
228                         no usage policy
229                 http://anonmails.de/
230                         seems serious but missing necessary info
231                                 usage policy
232                                 listing policy
233                 http://blacklist.jippg.org/
234                         no usage policy
235                         no listing policy
236                         no return code info
237                 bip.virusfree.cz
238                         used by rspamd
239                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
240                 https://www.nixspam.net/
241                         previously http://www.dnsbl.manitu.net/
242                         query zone: ix.dnsbl.manitu.net
243                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
244                         difficult to find info regarding listing policy
245                         asked for more information to be added
246                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
247                 access.redhawk.org
248                         website works but barely any info, not even how to query it
249                         https://www.redhawk.org/?p=64
250                         https://www.redhawk.org/SpamHawk/index.php
251                 https://senderscore.org/
252                         requires registration?
253                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
254                         https://senderscore.org/assess/blocklist-lookup/
255                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
256                         no information how to query found
257                 mail-abuse.org
258                         https://ers.trendmicro.com/
259                         trendmicro paid service
260                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
261                                 »If you don’t create an account, you can still query the reputation of an IP address«
262                         I don’t find any pricing or usage information
263         00_E_PAID
264         00_E_PRIVATE
265                 88.blacklist.zap
266                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
267                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
268                         https://www.blalert.com/dnsbl/88.blacklist.zap
269                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
270                         https://www.dnsbl.com/search/label/frontbridge
271                 http://drmx.org/
272                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
273                 rbl.tdk.net
274                         tdk.net seems dead on http(s)
275                         private
276                                 https://www.blalert.com/dnsbl/rbl.tdk.net
277                         old link: http://postmaster.tdc.dk/publish.php?id=31787
278                                 tdc.dk redirects to yousee.dk
279                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
280                 rbl.zenon.net
281                         private
282                                 https://www.blalert.com/dnsbl/rbl.zenon.net
283                         http://www.noc.zenon.net/rbl/
284                         russian(?)
285                 https://ahbl.org/
286                         was public until 2015
287                         now private, invite-only
288         http://rfc-clueless.org/
289                 lists domains
290                         that do not adhere to common best practices or requirements
291                 does NOT list spammers!
292                 listing criteria are explained well
293                         http://rfc-clueless.org/pages/listing_policy
294                 return codes are explained
295                         http://rfc-clueless.org/
296                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
297         http://spameatingmonkey.com/
298                 lists IPs
299                         that sent backscatter
300                         that sent to spamtrap
301                         added by policy
302                                 this includes dial-up!
303                                 https://spameatingmonkey.com/faq/policy-based-listing
304                 lists domains/URIs
305                         by age
306                         in spam bodies
307                 usage policy seems clear
308                         https://spameatingmonkey.com/faq/query-limits
309                 listing policy seems clear
310                         https://spameatingmonkey.com/services
311                 return codes documented
312                         https://spameatingmonkey.com/services
313         http://uribl.com/
314                 lists domains/URIs
315                         that appear in spam bodies
316                         has whitelist
317                 lists IPs
318                         that URIs in spam bodies resolve to
319                 return codes are documented
320                         https://uribl.com/about.shtml#implementation
321                         bitmasked
322                         127.0.0.1 is used to signal abusive query behaviour
323         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
324                 called "hostkarma"
325                 lists domains/URIs
326                 lists IPs
327                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
328                 listing policy is documented
329                 return codes are documented
330         http://www.sorbs.net/
331                 good reputation
332                 seems sensible
333                 different kinds of lists
334         http://www.spamhaus.org/
335                 good reputation
336                 very well done
337                 different kinds of lists!
338         http://www.surbl.org/
339         http://zapbl.net/
340         https://rbl.foobar.hu/
341         http://apews.org/?page=filter
342                 questionable
343         http://uribl.com/
344         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
345         http://www.spamhauswhitelist.com/en/
346         https://www.dnswl.org/
347         00_E_FOCUS
348                 http://stopspam.org/rblcheck/index.php
349                         different kinds of lists
350                         none usable for me
351                 http://www.dnsblchile.org/
352                         chilenian spam
353         00_LISTS_BLOGSPAMMERS
354                 http://blogspambl.com/
355                 https://www.madavi.de/madavibl/
356                 http://bsb.empty.us/
357         00_LISTS_COUNTRIES
358                 http://countries.nerd.dk/
359                 korea
360                         http://korea.services.net/
361         00_LISTS_DIALUPS
362                 http://dul.ru/dul.en.html
363                         DEAD for sale
364         00_LISTS_OPENRESOLVERS
365                 http://dns.measurement-factory.com/surveys/openresolvers.html
366         00_LISTS_TORNODES
367                 http://www.sectoor.de/tor.php
368                 https://www.dan.me.uk/dnsbl
369         https://0spam.org/
370                 clear information on usage policy
371                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
372                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
373                 seems serious
374                 listing policies are a little less clear
375                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
376                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
377                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
378                 return codes not very clear
379         http://anticaptcha.net/
380         http://blacklist.lashback.com/
381                 http://ubl.unsubscore.com
382         http://blacklist.woody.ch/rblcheck.php3
383         http://cbl.abuseat.org/
384         http://dnsbl.burnt-tech.com/
385         http://dnsbl.iip.lu/
386         http://dnsbl.inps.de/
387         http://dnsbl.tornevall.org/
388         http://dronebl.org/
389         http://mailspike.net/usage.html
390         http://psbl.org/
391                 query zone: psbl.surriel.com
392         http://rbl.dns-servicios.com/rbl.php
393         http://rbl.schulte.org/
394         http://rbldata.interserver.net/
395                 may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
396         http://relaytest.kundenserver.de/
397         http://rv-soft.info/
398         http://spamcannibal.org/dnsbl_check.shtml
399         http://spamrats.com/
400         http://spamstinks.com/
401         http://st.technovision.dk/
402         http://tor.efnet.org/
403                 http://rbl.efnetrbl.org/ MIRROR
404         http://v4bl.org/
405         http://virbl.bit.nl/
406         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
407         http://wpbl.info/
408         http://www.aupads.org/
409         http://www.backscatterer.org/
410                 fragwuerdige policy - bezahlen fuer schnelleres delisting
411         http://www.blockedservers.com/
412         http://www.blocklist.de/en/index.html
413         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
414         http://www.gbudb.com/truncate/
415         http://www.justspam.org/
416         http://www.kempt.net/dnsbl/
417         http://www.leadmon.net/spamguard/
418         http://www.rbl.jp/allrbl-e.html
419         http://www.sorbs.net/
420                 good reputation
421                 seems sensible
422                 different kinds of lists
423         http://www.spamcop.net/
424                 good policy
425                 good reputation
426         http://www.spamhaus.org/
427                 good reputation
428                 very well done
429                 different kinds of lists!
430         http://www.spamsources.fabel.dk/
431                 sensible policy
432         http://www.srntools.com/blacklist/
433         http://www.uceprotect.net/en/index.php
434         http://www.usenix.org.uk/content/rbl.html
435         http://zapbl.net/
436         https://bl.konstant.no/
437         https://choon.net/rbl.php
438         https://puck.nether.net/or/
439                 might be good
440         https://rbl.foobar.hu/
441         https://www.abuse.ch/
442                 https://www.abuse.ch/?tag=httpbl
443         https://www.kisarbl.or.kr/
444         https://www.megarbl.net/
445         https://www.team-cymru.org/Services/Bogons/dns.html
446         http://mailspike.net/usage.html
447                 reputation-based
448         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
449                 very nice project!
450         http://www.spamhauswhitelist.com/en/
451                 policies for listing and usage on the website
452         http://www.whitelisted.org/
453                 paid subscription
454                 policy on site
455         https://puck.nether.net/or/
456                 policies on website
457         https://rbl.foobar.hu/
458                 usage and listing policies on website
459         http://www.isipp.com/email-accreditation/iadb-query-instruction/
460                 requires signup
461         https://choon.net/rbl.php
462                 not quite a usage policy, but seems ok
463                 strange split of ipv4 and ipv6
464                 seems dead?
465         https://www.dnswl.org/