]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/blob - dnslists.otl
fixup! update junkemailfilter.com aka hostkarma
[user/henk/docs/dnsbl_notes.git] / dnslists.otl
1 TODO
2         check and link (de)listing policy
3                 NOGO: delisting for money
4         check and link usage policy
5         check and link return codes
6         find newsfeed or mailinglist
7         give feedback?
8         implement in exim
9         implement in SA
10         implement in rspamd
11 implement
12         https://abuse.ro/
13                 policy
14                         spamtraps
15                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
16                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
17                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
18 00_META
19         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
20         http://www.blalert.com/dnsbls
21         http://www.dnsbl.info/dnsbl-list.php
22         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
23         http://www.sdsc.edu/~jeff/spam/cbc.html
24         http://moensted.dk/spam/
25         https://whatismyipaddress.com/blacklist-check
26         https://multirbl.valli.org/
27         https://glockapps.com/blacklist/
28         https://docs.hetrixtools.com/monitored-blacklists/
29         https://www.blacklistmaster.com/
30         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
31         https://github.com/zbetcheckin/DNSBLs
32 00_ELANG
33         http://dnsbl.aspnet.hu/
34                 hungarian?
35         http://spam-rbl.fr/
36                 french
37         https://mav.com.br/
38                 maybe? they have antispam but it’s all portugese? or spanish? no idea
39 00_DEAD
40         http://openrbl.org/
41                 as seems dead
42                         404s
43                         wiki is down
44         http://mailhosts.org/
45                 dead
46                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
47         blitzed.org
48                 dead since 2006
49                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
50                                 referenced ML post is 404
51         blackholes.five-ten-sg.com
52                 Offline as of 1/1/2013
53                         https://whatismyipaddress.com/five-ten-sg
54         dynip.rothen.com
55                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
56                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
57         fl.chickenboner.biz
58                 dead since 2011
59                         https://community.spiceworks.com/topic/329762-blacklist-removal
60                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
61                 website contains spam/crap
62         http://cart00ney.surriel.com/
63                 cart00ney.org is dead
64         http://dsbl.org/
65                 points to surriel.com
66         http://csma.biz/
67                 domain is for sale
68                 dead since 2013
69                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
70         http://dnsbl.net.au/
71                 website contains info about living in australia? called "AusBlog"
72                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
73         http://moensted.dk/spam/
74                 dead since 2010
75                 https://moensted.dk/spam/
76         http://rbl.mw-internet.net/
77                 domain was parked
78                 2023: it is an asian(?) gambling(?) website
79         http://www.blackholes.us/
80                 dead since 2009
81                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
82         http://www.deadbeef.com/
83                 dead, no info
84         spamsources.dnsbl.info
85                 dead since 2011 or so
86                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
87         http://www.gweep.ca/
88                 domain dead, no other info
89         http://www.njabl.org/
90                 dead since 2013
91                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
92         http://wytnij.to/
93                 website parked, no other info
94         https://www.transip.nl/
95                 dead since 2013
96                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
97                         https://www.blalert.com/dnsbl/residential.block.transip.nl
98         pss.spambusters.org.ar
99                 NXDOMAIN
100         rbl.snark.net
101                 NXDOMAIN
102                 https://snark.net/ gives access denied
103         whois.rfc-ignorant.org
104                 NXDOMAIN
105                 rfc-ignorant.org registered but no A/AAAA record
106                 dead since 2012
107                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
108                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
109         will-spam-for-food.eu.org
110                 unmaintained
111                 dead
112                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
113         http://proxybl.org/
114                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
115                 https://linuxreviews.org/Mail_Spam_Blacklists
116                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
117         dev.null.dk
118                 timeout, also on the parent null.dk
119                 effectively dead
120         dnsbl.mags.net
121                 seems dead, no info to be found
122                 domain does not respond
123         http://msrbl.blogspot.ch/
124                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
125                 effectively dead
126         http://www.olsentech.net/
127                 strange content on web
128                 effectively dead
129         rbl.orbitrbl.com
130                 http://www.orbitrbl.com/
131                 timeout
132         rbl.polarcomm.net
133                 NXDOMAIN
134                 registered but no A/AAAA record
135         cidr.bl.mcafee.com
136                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
137                         404
138                 no info to be found
139                 dead?
140         http://anti-spam.org.cn/?locale=en_US
141                 unreachable DNS
142         rbl.talkactive.net
143                 seems dead
144                 talkactive.net redirects twice to some hosting company
145                 last listings in 2017
146                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
147                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
148         dnsbl.ipocalypse.net
149                 no policies published
150                 dead
151                         was a private list of an irc network
152                         network was renamed idlechat.net in 2014
153                         became a discord chat in 2022(?)
154         http://blakjak.net/RBL
155                 external access disabled
156                 2023: seems dead, website is a weird error
157                 https://www.blalert.com/dnsbl/rbl.blakjak.net
158                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
159         http://cyberlogic.net/
160                 french (canada)
161                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
162                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
163                 https://www.dnsbl.com/2018/05/
164                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
165         http://www.rbl.jp/allrbl-e.html
166                 website asks for login or just errors
167 00_NEEDS_RECHECK
168         https://antispam.imp.ch/
169                 no usage policy
170                 no return code info
171                 no good listing policy
172                 information received from inquiry to provider
173                         website will be updated
174                         return codes
175                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
176                                         127.0.1.8 = default
177                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
178                                         127.0.0.11 => REPO (Email reported as Spam by customer)
179                                 spamrbl.imp.ch (3 days holding time)
180                                         IPs are listed when trying to send mail to the spamtrap mailserver
181                                         MD5 hash: attachment sent to the swinog blacklist
182                                 wormrbl.imp.ch
183                                         DEAD
184         http://blacklist.woody.ch/rblcheck.php3
185                 dead?
186                 waiting for feedback
187 00_NEEDS_RESEARCH
188         bl.tiopan.com
189         blocked.hilli.dk
190         dialups.visi.com
191         dnsbl.antispam.or.id
192         dob.sibl.support-intelligence.net
193         intruders.docs.uu.se
194         map.spam-rbl.com
195         rbl.triumf.ca
196         all.s5h.net
197                 http://www.usenix.org.uk/content/rbl.html
198         torexit.dan.me.uk
199         http://pedantic.org/
200                 as of 20140701
201         rbl.fasthosts.co.uk
202                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
203                 seems dead?
204                 https://antispam.fasthosts.co.uk/
205 00_ALIVE
206         00_RECONSIDER
207                 http://barracudacentral.org/rbl
208                         requires account with extensive information (more than spamhaus e.g.):
209                                 your name.
210                                 your company name.
211                                 your phone number.
212                                 your address.
213                                 your city name.
214                                 your state/province name.
215                                 your zip/postal code.
216                                 the name of the alternate contact.
217                                 the phone number of the alternate contact.
218                                 the email address of the alternate contact.
219                         seems well documented
220         00_E_EVIL
221                 sbl.nszones.com
222                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
223         00_E_INFORMATION
224                 blacklist.sci.kun.nl
225                         https://cncz.science.ru.nl/en/howto/email-spam/
226                         not really its own DNSBL?
227                         no usage information
228                         no usage policy
229                 http://anonmails.de/
230                         seems serious but missing necessary info
231                                 usage policy
232                                 listing policy
233                 http://blacklist.jippg.org/
234                         no usage policy
235                         no listing policy
236                         no return code info
237                 bip.virusfree.cz
238                         used by rspamd
239                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
240                 https://www.nixspam.net/
241                         previously http://www.dnsbl.manitu.net/
242                         query zone: ix.dnsbl.manitu.net
243                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
244                         difficult to find info regarding listing policy
245                         asked for more information to be added
246                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
247                 access.redhawk.org
248                         website works but barely any info, not even how to query it
249                         https://www.redhawk.org/?p=64
250                         https://www.redhawk.org/SpamHawk/index.php
251                 https://senderscore.org/
252                         requires registration?
253                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
254                         https://senderscore.org/assess/blocklist-lookup/
255                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
256                         no information how to query found
257                 mail-abuse.org
258                         https://ers.trendmicro.com/
259                         trendmicro paid service
260                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
261                                 »If you don’t create an account, you can still query the reputation of an IP address«
262                         I don’t find any pricing or usage information
263         00_E_PAID
264         00_E_PRIVATE
265                 88.blacklist.zap
266                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
267                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
268                         https://www.blalert.com/dnsbl/88.blacklist.zap
269                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
270                         https://www.dnsbl.com/search/label/frontbridge
271                 http://drmx.org/
272                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
273                 rbl.tdk.net
274                         tdk.net seems dead on http(s)
275                         private
276                                 https://www.blalert.com/dnsbl/rbl.tdk.net
277                         old link: http://postmaster.tdc.dk/publish.php?id=31787
278                                 tdc.dk redirects to yousee.dk
279                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
280                 rbl.zenon.net
281                         private
282                                 https://www.blalert.com/dnsbl/rbl.zenon.net
283                         http://www.noc.zenon.net/rbl/
284                         russian(?)
285                 https://ahbl.org/
286                         was public until 2015
287                         now private, invite-only
288         http://rfc-clueless.org/
289                 lists domains
290                         that do not adhere to common best practices or requirements
291                 does NOT list spammers!
292                 listing criteria are explained well
293                         http://rfc-clueless.org/pages/listing_policy
294                 return codes are explained
295                         http://rfc-clueless.org/
296                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
297         http://spameatingmonkey.com/
298                 lists IPs
299                         that sent backscatter
300                         that sent to spamtrap
301                         added by policy
302                                 this includes dial-up!
303                                 https://spameatingmonkey.com/faq/policy-based-listing
304                 lists domains/URIs
305                         by age
306                         in spam bodies
307                 usage policy seems clear
308                         https://spameatingmonkey.com/faq/query-limits
309                 listing policy seems clear
310                         https://spameatingmonkey.com/services
311                 return codes documented
312                         https://spameatingmonkey.com/services
313         http://uribl.com/
314                 lists domains/URIs
315                         that appear in spam bodies
316                         has whitelist
317                 lists IPs
318                         that URIs in spam bodies resolve to
319                 return codes are documented
320                         https://uribl.com/about.shtml#implementation
321                         bitmasked
322                         127.0.0.1 is used to signal abusive query behaviour
323         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
324                 called "hostkarma"
325                 lists domains/URIs
326                 lists IPs
327                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
328                 listing policy is documented
329                 return codes are documented
330                 seems very trustworthy
331         http://www.sorbs.net/
332                 good reputation
333                 seems sensible
334                 different kinds of lists
335         http://www.spamhaus.org/
336                 good reputation
337                 very well done
338                 different kinds of lists!
339         http://www.surbl.org/
340         http://zapbl.net/
341         https://rbl.foobar.hu/
342         http://apews.org/?page=filter
343                 questionable
344         http://uribl.com/
345         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
346         http://www.spamhauswhitelist.com/en/
347         https://www.dnswl.org/
348         00_E_FOCUS
349                 http://stopspam.org/rblcheck/index.php
350                         different kinds of lists
351                         none usable for me
352                 http://www.dnsblchile.org/
353                         chilenian spam
354         00_LISTS_BLOGSPAMMERS
355                 http://blogspambl.com/
356                 https://www.madavi.de/madavibl/
357                 http://bsb.empty.us/
358         00_LISTS_COUNTRIES
359                 http://countries.nerd.dk/
360                 korea
361                         http://korea.services.net/
362         00_LISTS_DIALUPS
363                 http://dul.ru/dul.en.html
364                         DEAD for sale
365         00_LISTS_OPENRESOLVERS
366                 http://dns.measurement-factory.com/surveys/openresolvers.html
367         00_LISTS_TORNODES
368                 http://www.sectoor.de/tor.php
369                 https://www.dan.me.uk/dnsbl
370         https://0spam.org/
371                 clear information on usage policy
372                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
373                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
374                 seems serious
375                 listing policies are a little less clear
376                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
377                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
378                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
379                 return codes not very clear
380         http://anticaptcha.net/
381         http://blacklist.lashback.com/
382                 http://ubl.unsubscore.com
383         http://blacklist.woody.ch/rblcheck.php3
384         http://cbl.abuseat.org/
385         http://dnsbl.burnt-tech.com/
386         http://dnsbl.iip.lu/
387         http://dnsbl.inps.de/
388         http://dnsbl.tornevall.org/
389         http://dronebl.org/
390         http://mailspike.net/usage.html
391         http://psbl.org/
392                 query zone: psbl.surriel.com
393         http://rbl.dns-servicios.com/rbl.php
394         http://rbl.schulte.org/
395         http://rbldata.interserver.net/
396                 may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
397         http://relaytest.kundenserver.de/
398         http://rv-soft.info/
399         http://spamcannibal.org/dnsbl_check.shtml
400         http://spamrats.com/
401         http://spamstinks.com/
402         http://st.technovision.dk/
403         http://tor.efnet.org/
404                 http://rbl.efnetrbl.org/ MIRROR
405         http://v4bl.org/
406         http://virbl.bit.nl/
407         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
408         http://wpbl.info/
409         http://www.aupads.org/
410         http://www.backscatterer.org/
411                 fragwuerdige policy - bezahlen fuer schnelleres delisting
412         http://www.blockedservers.com/
413         http://www.blocklist.de/en/index.html
414         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
415         http://www.gbudb.com/truncate/
416         http://www.justspam.org/
417         http://www.kempt.net/dnsbl/
418         http://www.leadmon.net/spamguard/
419         http://www.rbl.jp/allrbl-e.html
420         http://www.sorbs.net/
421                 good reputation
422                 seems sensible
423                 different kinds of lists
424         http://www.spamcop.net/
425                 good policy
426                 good reputation
427         http://www.spamhaus.org/
428                 good reputation
429                 very well done
430                 different kinds of lists!
431         http://www.spamsources.fabel.dk/
432                 sensible policy
433         http://www.srntools.com/blacklist/
434         http://www.uceprotect.net/en/index.php
435         http://www.usenix.org.uk/content/rbl.html
436         http://zapbl.net/
437         https://bl.konstant.no/
438         https://choon.net/rbl.php
439         https://puck.nether.net/or/
440                 might be good
441         https://rbl.foobar.hu/
442         https://www.abuse.ch/
443                 https://www.abuse.ch/?tag=httpbl
444         https://www.kisarbl.or.kr/
445         https://www.megarbl.net/
446         https://www.team-cymru.org/Services/Bogons/dns.html
447         http://mailspike.net/usage.html
448                 reputation-based
449         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
450                 very nice project!
451         http://www.spamhauswhitelist.com/en/
452                 policies for listing and usage on the website
453         http://www.whitelisted.org/
454                 paid subscription
455                 policy on site
456         https://puck.nether.net/or/
457                 policies on website
458         https://rbl.foobar.hu/
459                 usage and listing policies on website
460         http://www.isipp.com/email-accreditation/iadb-query-instruction/
461                 requires signup
462         https://choon.net/rbl.php
463                 not quite a usage policy, but seems ok
464                 strange split of ipv4 and ipv6
465                 seems dead?
466         https://www.dnswl.org/