]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/blob - dnslists.otl
update spamhaus
[user/henk/docs/dnsbl_notes.git] / dnslists.otl
1 TODO
2         check and link (de)listing policy
3                 NOGO: delisting for money
4         check and link usage policy
5         check and link return codes
6         find newsfeed or mailinglist
7         give feedback?
8         implement in exim
9         implement in SA
10         implement in rspamd
11 implement
12         https://abuse.ro/
13                 policy
14                         spamtraps
15                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
16                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
17                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
18 00_META
19         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
20         http://www.blalert.com/dnsbls
21         http://www.dnsbl.info/dnsbl-list.php
22         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
23         http://www.sdsc.edu/~jeff/spam/cbc.html
24         http://moensted.dk/spam/
25         https://whatismyipaddress.com/blacklist-check
26         https://multirbl.valli.org/
27         https://glockapps.com/blacklist/
28         https://docs.hetrixtools.com/monitored-blacklists/
29         https://www.blacklistmaster.com/
30         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
31         https://github.com/zbetcheckin/DNSBLs
32 00_ELANG
33         http://dnsbl.aspnet.hu/
34                 hungarian?
35         http://spam-rbl.fr/
36                 french
37         https://mav.com.br/
38                 maybe? they have antispam but it’s all portugese? or spanish? no idea
39 00_DEAD
40         http://openrbl.org/
41                 as seems dead
42                         404s
43                         wiki is down
44         http://mailhosts.org/
45                 dead
46                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
47         blitzed.org
48                 dead since 2006
49                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
50                                 referenced ML post is 404
51         blackholes.five-ten-sg.com
52                 Offline as of 1/1/2013
53                         https://whatismyipaddress.com/five-ten-sg
54         dynip.rothen.com
55                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
56                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
57         fl.chickenboner.biz
58                 dead since 2011
59                         https://community.spiceworks.com/topic/329762-blacklist-removal
60                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
61                 website contains spam/crap
62         http://cart00ney.surriel.com/
63                 cart00ney.org is dead
64         http://dsbl.org/
65                 points to surriel.com
66         http://csma.biz/
67                 domain is for sale
68                 dead since 2013
69                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
70         http://dnsbl.net.au/
71                 website contains info about living in australia? called "AusBlog"
72                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
73         http://moensted.dk/spam/
74                 dead since 2010
75                 https://moensted.dk/spam/
76         http://rbl.mw-internet.net/
77                 domain was parked
78                 2023: it is an asian(?) gambling(?) website
79         http://www.blackholes.us/
80                 dead since 2009
81                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
82         http://www.deadbeef.com/
83                 dead, no info
84         spamsources.dnsbl.info
85                 dead since 2011 or so
86                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
87         http://www.gweep.ca/
88                 domain dead, no other info
89         http://www.njabl.org/
90                 dead since 2013
91                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
92         http://wytnij.to/
93                 website parked, no other info
94         https://www.transip.nl/
95                 dead since 2013
96                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
97                         https://www.blalert.com/dnsbl/residential.block.transip.nl
98         pss.spambusters.org.ar
99                 NXDOMAIN
100         rbl.snark.net
101                 NXDOMAIN
102                 https://snark.net/ gives access denied
103         whois.rfc-ignorant.org
104                 NXDOMAIN
105                 rfc-ignorant.org registered but no A/AAAA record
106                 dead since 2012
107                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
108                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
109         will-spam-for-food.eu.org
110                 unmaintained
111                 dead
112                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
113         http://proxybl.org/
114                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
115                 https://linuxreviews.org/Mail_Spam_Blacklists
116                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
117         dev.null.dk
118                 timeout, also on the parent null.dk
119                 effectively dead
120         dnsbl.mags.net
121                 seems dead, no info to be found
122                 domain does not respond
123         http://msrbl.blogspot.ch/
124                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
125                 effectively dead
126         http://www.olsentech.net/
127                 strange content on web
128                 effectively dead
129         rbl.orbitrbl.com
130                 http://www.orbitrbl.com/
131                 timeout
132         rbl.polarcomm.net
133                 NXDOMAIN
134                 registered but no A/AAAA record
135         cidr.bl.mcafee.com
136                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
137                         404
138                 no info to be found
139                 dead?
140         http://anti-spam.org.cn/?locale=en_US
141                 unreachable DNS
142         rbl.talkactive.net
143                 seems dead
144                 talkactive.net redirects twice to some hosting company
145                 last listings in 2017
146                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
147                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
148         dnsbl.ipocalypse.net
149                 no policies published
150                 dead
151                         was a private list of an irc network
152                         network was renamed idlechat.net in 2014
153                         became a discord chat in 2022(?)
154         http://blakjak.net/RBL
155                 external access disabled
156                 2023: seems dead, website is a weird error
157                 https://www.blalert.com/dnsbl/rbl.blakjak.net
158                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
159         http://cyberlogic.net/
160                 french (canada)
161                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
162                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
163                 https://www.dnsbl.com/2018/05/
164                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
165         http://www.rbl.jp/allrbl-e.html
166                 website asks for login or just errors
167 00_NEEDS_RECHECK
168         https://antispam.imp.ch/
169                 no usage policy
170                 no return code info
171                 no good listing policy
172                 information received from inquiry to provider
173                         website will be updated
174                         return codes
175                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
176                                         127.0.1.8 = default
177                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
178                                         127.0.0.11 => REPO (Email reported as Spam by customer)
179                                 spamrbl.imp.ch (3 days holding time)
180                                         IPs are listed when trying to send mail to the spamtrap mailserver
181                                         MD5 hash: attachment sent to the swinog blacklist
182                                 wormrbl.imp.ch
183                                         DEAD
184         http://blacklist.woody.ch/rblcheck.php3
185                 dead?
186                 waiting for feedback
187 00_NEEDS_RESEARCH
188         bl.tiopan.com
189         blocked.hilli.dk
190         dialups.visi.com
191         dnsbl.antispam.or.id
192         dob.sibl.support-intelligence.net
193         intruders.docs.uu.se
194         map.spam-rbl.com
195         rbl.triumf.ca
196         all.s5h.net
197                 http://www.usenix.org.uk/content/rbl.html
198         torexit.dan.me.uk
199         http://pedantic.org/
200                 as of 20140701
201         rbl.fasthosts.co.uk
202                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
203                 seems dead?
204                 https://antispam.fasthosts.co.uk/
205 00_ALIVE
206         00_RECONSIDER
207                 http://barracudacentral.org/rbl
208                         requires account with extensive information (more than spamhaus e.g.):
209                                 your name.
210                                 your company name.
211                                 your phone number.
212                                 your address.
213                                 your city name.
214                                 your state/province name.
215                                 your zip/postal code.
216                                 the name of the alternate contact.
217                                 the phone number of the alternate contact.
218                                 the email address of the alternate contact.
219                         seems well documented
220         00_E_EVIL
221                 sbl.nszones.com
222                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
223         00_E_INFORMATION
224                 blacklist.sci.kun.nl
225                         https://cncz.science.ru.nl/en/howto/email-spam/
226                         not really its own DNSBL?
227                         no usage information
228                         no usage policy
229                 http://anonmails.de/
230                         seems serious but missing necessary info
231                                 usage policy
232                                 listing policy
233                 http://blacklist.jippg.org/
234                         no usage policy
235                         no listing policy
236                         no return code info
237                 bip.virusfree.cz
238                         used by rspamd
239                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
240                 https://www.nixspam.net/
241                         previously http://www.dnsbl.manitu.net/
242                         query zone: ix.dnsbl.manitu.net
243                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
244                         difficult to find info regarding listing policy
245                         asked for more information to be added
246                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
247                 access.redhawk.org
248                         website works but barely any info, not even how to query it
249                         https://www.redhawk.org/?p=64
250                         https://www.redhawk.org/SpamHawk/index.php
251                 https://senderscore.org/
252                         requires registration?
253                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
254                         https://senderscore.org/assess/blocklist-lookup/
255                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
256                         no information how to query found
257                 mail-abuse.org
258                         https://ers.trendmicro.com/
259                         trendmicro paid service
260                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
261                                 »If you don’t create an account, you can still query the reputation of an IP address«
262                         I don’t find any pricing or usage information
263         00_E_PAID
264         00_E_PRIVATE
265                 88.blacklist.zap
266                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
267                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
268                         https://www.blalert.com/dnsbl/88.blacklist.zap
269                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
270                         https://www.dnsbl.com/search/label/frontbridge
271                 http://drmx.org/
272                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
273                 rbl.tdk.net
274                         tdk.net seems dead on http(s)
275                         private
276                                 https://www.blalert.com/dnsbl/rbl.tdk.net
277                         old link: http://postmaster.tdc.dk/publish.php?id=31787
278                                 tdc.dk redirects to yousee.dk
279                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
280                 rbl.zenon.net
281                         private
282                                 https://www.blalert.com/dnsbl/rbl.zenon.net
283                         http://www.noc.zenon.net/rbl/
284                         russian(?)
285                 https://ahbl.org/
286                         was public until 2015
287                         now private, invite-only
288         http://rfc-clueless.org/
289                 lists domains
290                         that do not adhere to common best practices or requirements
291                 does NOT list spammers!
292                 listing criteria are explained well
293                         http://rfc-clueless.org/pages/listing_policy
294                 return codes are explained
295                         http://rfc-clueless.org/
296                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
297         http://spameatingmonkey.com/
298                 lists IPs
299                         that sent backscatter
300                         that sent to spamtrap
301                         added by policy
302                                 this includes dial-up!
303                                 https://spameatingmonkey.com/faq/policy-based-listing
304                 lists domains/URIs
305                         by age
306                         in spam bodies
307                 usage policy seems clear
308                         https://spameatingmonkey.com/faq/query-limits
309                 listing policy seems clear
310                         https://spameatingmonkey.com/services
311                 return codes documented
312                         https://spameatingmonkey.com/services
313         http://uribl.com/
314                 lists domains/URIs
315                         that appear in spam bodies
316                         has whitelist
317                 lists IPs
318                         that URIs in spam bodies resolve to
319                 return codes are documented
320                         https://uribl.com/about.shtml#implementation
321                         bitmasked
322                         127.0.0.1 is used to signal abusive query behaviour
323         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
324                 called "hostkarma"
325                 lists domains/URIs
326                 lists IPs
327                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
328                 listing policy is documented
329                 return codes are documented
330                 seems very trustworthy
331         http://www.sorbs.net/
332                 good reputation
333                 lists domains/URIs
334                 lists IPs
335                 usage policy is clear that it’s free
336                 listing policy is documented
337                 return codes are documented
338                 seems trustworthy
339         http://www.spamhaus.org/
340                 good reputation
341                 very well done
342                 seems very professional
343                 lists domains/URIs
344                 lists IPs
345                 usage policy is clear
346                         https://www.spamhaus.org/organization/dnsblusage/
347                 listing policies are clearly documented
348                 return codes are clearly documented
349         http://www.surbl.org/
350         http://zapbl.net/
351         https://rbl.foobar.hu/
352         http://apews.org/?page=filter
353                 questionable
354         http://uribl.com/
355         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
356         http://www.spamhauswhitelist.com/en/
357         https://www.dnswl.org/
358         00_E_FOCUS
359                 http://stopspam.org/rblcheck/index.php
360                         different kinds of lists
361                         none usable for me
362                 http://www.dnsblchile.org/
363                         chilenian spam
364         00_LISTS_BLOGSPAMMERS
365                 http://blogspambl.com/
366                 https://www.madavi.de/madavibl/
367                 http://bsb.empty.us/
368         00_LISTS_COUNTRIES
369                 http://countries.nerd.dk/
370                 korea
371                         http://korea.services.net/
372         00_LISTS_DIALUPS
373                 http://dul.ru/dul.en.html
374                         DEAD for sale
375         00_LISTS_OPENRESOLVERS
376                 http://dns.measurement-factory.com/surveys/openresolvers.html
377         00_LISTS_TORNODES
378                 http://www.sectoor.de/tor.php
379                 https://www.dan.me.uk/dnsbl
380         https://0spam.org/
381                 clear information on usage policy
382                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
383                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
384                 seems serious
385                 listing policies are a little less clear
386                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
387                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
388                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
389                 return codes not very clear
390         http://anticaptcha.net/
391         http://blacklist.lashback.com/
392                 http://ubl.unsubscore.com
393         http://blacklist.woody.ch/rblcheck.php3
394         http://cbl.abuseat.org/
395         http://dnsbl.burnt-tech.com/
396         http://dnsbl.iip.lu/
397         http://dnsbl.inps.de/
398         http://dnsbl.tornevall.org/
399         http://dronebl.org/
400         http://mailspike.net/usage.html
401         http://psbl.org/
402                 query zone: psbl.surriel.com
403         http://rbl.dns-servicios.com/rbl.php
404         http://rbl.schulte.org/
405         http://rbldata.interserver.net/
406                 may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
407         http://relaytest.kundenserver.de/
408         http://rv-soft.info/
409         http://spamcannibal.org/dnsbl_check.shtml
410         http://spamrats.com/
411         http://spamstinks.com/
412         http://st.technovision.dk/
413         http://tor.efnet.org/
414                 http://rbl.efnetrbl.org/ MIRROR
415         http://v4bl.org/
416         http://virbl.bit.nl/
417         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
418         http://wpbl.info/
419         http://www.aupads.org/
420         http://www.backscatterer.org/
421                 fragwuerdige policy - bezahlen fuer schnelleres delisting
422         http://www.blockedservers.com/
423         http://www.blocklist.de/en/index.html
424         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
425         http://www.gbudb.com/truncate/
426         http://www.justspam.org/
427         http://www.kempt.net/dnsbl/
428         http://www.leadmon.net/spamguard/
429         http://www.rbl.jp/allrbl-e.html
430         http://www.sorbs.net/
431                 good reputation
432                 seems sensible
433                 different kinds of lists
434         http://www.spamcop.net/
435                 good policy
436                 good reputation
437         http://www.spamhaus.org/
438                 good reputation
439                 very well done
440                 different kinds of lists!
441         http://www.spamsources.fabel.dk/
442                 sensible policy
443         http://www.srntools.com/blacklist/
444         http://www.uceprotect.net/en/index.php
445         http://www.usenix.org.uk/content/rbl.html
446         http://zapbl.net/
447         https://bl.konstant.no/
448         https://choon.net/rbl.php
449         https://puck.nether.net/or/
450                 might be good
451         https://rbl.foobar.hu/
452         https://www.abuse.ch/
453                 https://www.abuse.ch/?tag=httpbl
454         https://www.kisarbl.or.kr/
455         https://www.megarbl.net/
456         https://www.team-cymru.org/Services/Bogons/dns.html
457         http://mailspike.net/usage.html
458                 reputation-based
459         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
460                 very nice project!
461         http://www.spamhauswhitelist.com/en/
462                 policies for listing and usage on the website
463         http://www.whitelisted.org/
464                 paid subscription
465                 policy on site
466         https://puck.nether.net/or/
467                 policies on website
468         https://rbl.foobar.hu/
469                 usage and listing policies on website
470         http://www.isipp.com/email-accreditation/iadb-query-instruction/
471                 requires signup
472         https://choon.net/rbl.php
473                 not quite a usage policy, but seems ok
474                 strange split of ipv4 and ipv6
475                 seems dead?
476         https://www.dnswl.org/