]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/blob - dnslists.otl
update sorbs.net
[user/henk/docs/dnsbl_notes.git] / dnslists.otl
1 TODO
2         check and link (de)listing policy
3                 NOGO: delisting for money
4         check and link usage policy
5         check and link return codes
6         find newsfeed or mailinglist
7         give feedback?
8         implement in exim
9         implement in SA
10         implement in rspamd
11 implement
12         https://abuse.ro/
13                 policy
14                         spamtraps
15                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
16                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
17                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
18 00_META
19         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
20         http://www.blalert.com/dnsbls
21         http://www.dnsbl.info/dnsbl-list.php
22         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
23         http://www.sdsc.edu/~jeff/spam/cbc.html
24         http://moensted.dk/spam/
25         https://whatismyipaddress.com/blacklist-check
26         https://multirbl.valli.org/
27         https://glockapps.com/blacklist/
28         https://docs.hetrixtools.com/monitored-blacklists/
29         https://www.blacklistmaster.com/
30         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
31         https://github.com/zbetcheckin/DNSBLs
32 00_ELANG
33         http://dnsbl.aspnet.hu/
34                 hungarian?
35         http://spam-rbl.fr/
36                 french
37         https://mav.com.br/
38                 maybe? they have antispam but it’s all portugese? or spanish? no idea
39 00_DEAD
40         http://openrbl.org/
41                 as seems dead
42                         404s
43                         wiki is down
44         http://mailhosts.org/
45                 dead
46                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
47         blitzed.org
48                 dead since 2006
49                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
50                                 referenced ML post is 404
51         blackholes.five-ten-sg.com
52                 Offline as of 1/1/2013
53                         https://whatismyipaddress.com/five-ten-sg
54         dynip.rothen.com
55                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
56                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
57         fl.chickenboner.biz
58                 dead since 2011
59                         https://community.spiceworks.com/topic/329762-blacklist-removal
60                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
61                 website contains spam/crap
62         http://cart00ney.surriel.com/
63                 cart00ney.org is dead
64         http://dsbl.org/
65                 points to surriel.com
66         http://csma.biz/
67                 domain is for sale
68                 dead since 2013
69                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
70         http://dnsbl.net.au/
71                 website contains info about living in australia? called "AusBlog"
72                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
73         http://moensted.dk/spam/
74                 dead since 2010
75                 https://moensted.dk/spam/
76         http://rbl.mw-internet.net/
77                 domain was parked
78                 2023: it is an asian(?) gambling(?) website
79         http://www.blackholes.us/
80                 dead since 2009
81                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
82         http://www.deadbeef.com/
83                 dead, no info
84         spamsources.dnsbl.info
85                 dead since 2011 or so
86                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
87         http://www.gweep.ca/
88                 domain dead, no other info
89         http://www.njabl.org/
90                 dead since 2013
91                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
92         http://wytnij.to/
93                 website parked, no other info
94         https://www.transip.nl/
95                 dead since 2013
96                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
97                         https://www.blalert.com/dnsbl/residential.block.transip.nl
98         pss.spambusters.org.ar
99                 NXDOMAIN
100         rbl.snark.net
101                 NXDOMAIN
102                 https://snark.net/ gives access denied
103         whois.rfc-ignorant.org
104                 NXDOMAIN
105                 rfc-ignorant.org registered but no A/AAAA record
106                 dead since 2012
107                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
108                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
109         will-spam-for-food.eu.org
110                 unmaintained
111                 dead
112                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
113         http://proxybl.org/
114                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
115                 https://linuxreviews.org/Mail_Spam_Blacklists
116                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
117         dev.null.dk
118                 timeout, also on the parent null.dk
119                 effectively dead
120         dnsbl.mags.net
121                 seems dead, no info to be found
122                 domain does not respond
123         http://msrbl.blogspot.ch/
124                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
125                 effectively dead
126         http://www.olsentech.net/
127                 strange content on web
128                 effectively dead
129         rbl.orbitrbl.com
130                 http://www.orbitrbl.com/
131                 timeout
132         rbl.polarcomm.net
133                 NXDOMAIN
134                 registered but no A/AAAA record
135         cidr.bl.mcafee.com
136                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
137                         404
138                 no info to be found
139                 dead?
140         http://anti-spam.org.cn/?locale=en_US
141                 unreachable DNS
142         rbl.talkactive.net
143                 seems dead
144                 talkactive.net redirects twice to some hosting company
145                 last listings in 2017
146                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
147                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
148         dnsbl.ipocalypse.net
149                 no policies published
150                 dead
151                         was a private list of an irc network
152                         network was renamed idlechat.net in 2014
153                         became a discord chat in 2022(?)
154         http://blakjak.net/RBL
155                 external access disabled
156                 2023: seems dead, website is a weird error
157                 https://www.blalert.com/dnsbl/rbl.blakjak.net
158                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
159         http://cyberlogic.net/
160                 french (canada)
161                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
162                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
163                 https://www.dnsbl.com/2018/05/
164                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
165         http://www.rbl.jp/allrbl-e.html
166                 website asks for login or just errors
167 00_NEEDS_RECHECK
168         https://antispam.imp.ch/
169                 no usage policy
170                 no return code info
171                 no good listing policy
172                 information received from inquiry to provider
173                         website will be updated
174                         return codes
175                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
176                                         127.0.1.8 = default
177                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
178                                         127.0.0.11 => REPO (Email reported as Spam by customer)
179                                 spamrbl.imp.ch (3 days holding time)
180                                         IPs are listed when trying to send mail to the spamtrap mailserver
181                                         MD5 hash: attachment sent to the swinog blacklist
182                                 wormrbl.imp.ch
183                                         DEAD
184         http://blacklist.woody.ch/rblcheck.php3
185                 dead?
186                 waiting for feedback
187 00_NEEDS_RESEARCH
188         bl.tiopan.com
189         blocked.hilli.dk
190         dialups.visi.com
191         dnsbl.antispam.or.id
192         dob.sibl.support-intelligence.net
193         intruders.docs.uu.se
194         map.spam-rbl.com
195         rbl.triumf.ca
196         all.s5h.net
197                 http://www.usenix.org.uk/content/rbl.html
198         torexit.dan.me.uk
199         http://pedantic.org/
200                 as of 20140701
201         rbl.fasthosts.co.uk
202                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
203                 seems dead?
204                 https://antispam.fasthosts.co.uk/
205 00_ALIVE
206         00_RECONSIDER
207                 http://barracudacentral.org/rbl
208                         requires account with extensive information (more than spamhaus e.g.):
209                                 your name.
210                                 your company name.
211                                 your phone number.
212                                 your address.
213                                 your city name.
214                                 your state/province name.
215                                 your zip/postal code.
216                                 the name of the alternate contact.
217                                 the phone number of the alternate contact.
218                                 the email address of the alternate contact.
219                         seems well documented
220         00_E_EVIL
221                 sbl.nszones.com
222                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
223         00_E_INFORMATION
224                 blacklist.sci.kun.nl
225                         https://cncz.science.ru.nl/en/howto/email-spam/
226                         not really its own DNSBL?
227                         no usage information
228                         no usage policy
229                 http://anonmails.de/
230                         seems serious but missing necessary info
231                                 usage policy
232                                 listing policy
233                 http://blacklist.jippg.org/
234                         no usage policy
235                         no listing policy
236                         no return code info
237                 bip.virusfree.cz
238                         used by rspamd
239                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
240                 https://www.nixspam.net/
241                         previously http://www.dnsbl.manitu.net/
242                         query zone: ix.dnsbl.manitu.net
243                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
244                         difficult to find info regarding listing policy
245                         asked for more information to be added
246                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
247                 access.redhawk.org
248                         website works but barely any info, not even how to query it
249                         https://www.redhawk.org/?p=64
250                         https://www.redhawk.org/SpamHawk/index.php
251                 https://senderscore.org/
252                         requires registration?
253                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
254                         https://senderscore.org/assess/blocklist-lookup/
255                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
256                         no information how to query found
257                 mail-abuse.org
258                         https://ers.trendmicro.com/
259                         trendmicro paid service
260                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
261                                 »If you don’t create an account, you can still query the reputation of an IP address«
262                         I don’t find any pricing or usage information
263         00_E_PAID
264         00_E_PRIVATE
265                 88.blacklist.zap
266                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
267                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
268                         https://www.blalert.com/dnsbl/88.blacklist.zap
269                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
270                         https://www.dnsbl.com/search/label/frontbridge
271                 http://drmx.org/
272                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
273                 rbl.tdk.net
274                         tdk.net seems dead on http(s)
275                         private
276                                 https://www.blalert.com/dnsbl/rbl.tdk.net
277                         old link: http://postmaster.tdc.dk/publish.php?id=31787
278                                 tdc.dk redirects to yousee.dk
279                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
280                 rbl.zenon.net
281                         private
282                                 https://www.blalert.com/dnsbl/rbl.zenon.net
283                         http://www.noc.zenon.net/rbl/
284                         russian(?)
285                 https://ahbl.org/
286                         was public until 2015
287                         now private, invite-only
288         http://rfc-clueless.org/
289                 lists domains
290                         that do not adhere to common best practices or requirements
291                 does NOT list spammers!
292                 listing criteria are explained well
293                         http://rfc-clueless.org/pages/listing_policy
294                 return codes are explained
295                         http://rfc-clueless.org/
296                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
297         http://spameatingmonkey.com/
298                 lists IPs
299                         that sent backscatter
300                         that sent to spamtrap
301                         added by policy
302                                 this includes dial-up!
303                                 https://spameatingmonkey.com/faq/policy-based-listing
304                 lists domains/URIs
305                         by age
306                         in spam bodies
307                 usage policy seems clear
308                         https://spameatingmonkey.com/faq/query-limits
309                 listing policy seems clear
310                         https://spameatingmonkey.com/services
311                 return codes documented
312                         https://spameatingmonkey.com/services
313         http://uribl.com/
314                 lists domains/URIs
315                         that appear in spam bodies
316                         has whitelist
317                 lists IPs
318                         that URIs in spam bodies resolve to
319                 return codes are documented
320                         https://uribl.com/about.shtml#implementation
321                         bitmasked
322                         127.0.0.1 is used to signal abusive query behaviour
323         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
324                 called "hostkarma"
325                 lists domains/URIs
326                 lists IPs
327                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
328                 listing policy is documented
329                 return codes are documented
330                 seems very trustworthy
331         http://www.sorbs.net/
332                 good reputation
333                 lists domains/URIs
334                 lists IPs
335                 usage policy is clear that it’s free
336                 listing policy is documented
337                 return codes are documented
338                 seems trustworthy
339         http://www.spamhaus.org/
340                 good reputation
341                 very well done
342                 different kinds of lists!
343         http://www.surbl.org/
344         http://zapbl.net/
345         https://rbl.foobar.hu/
346         http://apews.org/?page=filter
347                 questionable
348         http://uribl.com/
349         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
350         http://www.spamhauswhitelist.com/en/
351         https://www.dnswl.org/
352         00_E_FOCUS
353                 http://stopspam.org/rblcheck/index.php
354                         different kinds of lists
355                         none usable for me
356                 http://www.dnsblchile.org/
357                         chilenian spam
358         00_LISTS_BLOGSPAMMERS
359                 http://blogspambl.com/
360                 https://www.madavi.de/madavibl/
361                 http://bsb.empty.us/
362         00_LISTS_COUNTRIES
363                 http://countries.nerd.dk/
364                 korea
365                         http://korea.services.net/
366         00_LISTS_DIALUPS
367                 http://dul.ru/dul.en.html
368                         DEAD for sale
369         00_LISTS_OPENRESOLVERS
370                 http://dns.measurement-factory.com/surveys/openresolvers.html
371         00_LISTS_TORNODES
372                 http://www.sectoor.de/tor.php
373                 https://www.dan.me.uk/dnsbl
374         https://0spam.org/
375                 clear information on usage policy
376                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
377                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
378                 seems serious
379                 listing policies are a little less clear
380                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
381                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
382                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
383                 return codes not very clear
384         http://anticaptcha.net/
385         http://blacklist.lashback.com/
386                 http://ubl.unsubscore.com
387         http://blacklist.woody.ch/rblcheck.php3
388         http://cbl.abuseat.org/
389         http://dnsbl.burnt-tech.com/
390         http://dnsbl.iip.lu/
391         http://dnsbl.inps.de/
392         http://dnsbl.tornevall.org/
393         http://dronebl.org/
394         http://mailspike.net/usage.html
395         http://psbl.org/
396                 query zone: psbl.surriel.com
397         http://rbl.dns-servicios.com/rbl.php
398         http://rbl.schulte.org/
399         http://rbldata.interserver.net/
400                 may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
401         http://relaytest.kundenserver.de/
402         http://rv-soft.info/
403         http://spamcannibal.org/dnsbl_check.shtml
404         http://spamrats.com/
405         http://spamstinks.com/
406         http://st.technovision.dk/
407         http://tor.efnet.org/
408                 http://rbl.efnetrbl.org/ MIRROR
409         http://v4bl.org/
410         http://virbl.bit.nl/
411         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
412         http://wpbl.info/
413         http://www.aupads.org/
414         http://www.backscatterer.org/
415                 fragwuerdige policy - bezahlen fuer schnelleres delisting
416         http://www.blockedservers.com/
417         http://www.blocklist.de/en/index.html
418         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
419         http://www.gbudb.com/truncate/
420         http://www.justspam.org/
421         http://www.kempt.net/dnsbl/
422         http://www.leadmon.net/spamguard/
423         http://www.rbl.jp/allrbl-e.html
424         http://www.sorbs.net/
425                 good reputation
426                 seems sensible
427                 different kinds of lists
428         http://www.spamcop.net/
429                 good policy
430                 good reputation
431         http://www.spamhaus.org/
432                 good reputation
433                 very well done
434                 different kinds of lists!
435         http://www.spamsources.fabel.dk/
436                 sensible policy
437         http://www.srntools.com/blacklist/
438         http://www.uceprotect.net/en/index.php
439         http://www.usenix.org.uk/content/rbl.html
440         http://zapbl.net/
441         https://bl.konstant.no/
442         https://choon.net/rbl.php
443         https://puck.nether.net/or/
444                 might be good
445         https://rbl.foobar.hu/
446         https://www.abuse.ch/
447                 https://www.abuse.ch/?tag=httpbl
448         https://www.kisarbl.or.kr/
449         https://www.megarbl.net/
450         https://www.team-cymru.org/Services/Bogons/dns.html
451         http://mailspike.net/usage.html
452                 reputation-based
453         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
454                 very nice project!
455         http://www.spamhauswhitelist.com/en/
456                 policies for listing and usage on the website
457         http://www.whitelisted.org/
458                 paid subscription
459                 policy on site
460         https://puck.nether.net/or/
461                 policies on website
462         https://rbl.foobar.hu/
463                 usage and listing policies on website
464         http://www.isipp.com/email-accreditation/iadb-query-instruction/
465                 requires signup
466         https://choon.net/rbl.php
467                 not quite a usage policy, but seems ok
468                 strange split of ipv4 and ipv6
469                 seems dead?
470         https://www.dnswl.org/