dnslists.otl

   1 TODO
   2         check and link (de)listing policy
   3                 NOGO: delisting for money
   4         check and link usage policy
   5         check and link return codes
   6         find newsfeed or mailinglist
   7         give feedback?
   8         implement in exim
   9         implement in SA
  10         implement in rspamd
  11 implement
  12         https://abuse.ro/
  13                 policy
  14                         spamtraps
  15                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
  16                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
  17                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
  18 00_META
  19         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
  20         http://www.blalert.com/dnsbls
  21         http://www.dnsbl.info/dnsbl-list.php
  22         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
  23         http://www.sdsc.edu/~jeff/spam/cbc.html
  24         http://moensted.dk/spam/
  25         https://whatismyipaddress.com/blacklist-check
  26         https://multirbl.valli.org/
  27         https://glockapps.com/blacklist/
  28         https://docs.hetrixtools.com/monitored-blacklists/
  29         https://www.blacklistmaster.com/
  30         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
  31         https://github.com/zbetcheckin/DNSBLs
  32         https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
  33 00_ELANG
  34         http://dnsbl.aspnet.hu/
  35                 hungarian?
  36         http://spam-rbl.fr/
  37                 french
  38         https://mav.com.br/
  39                 maybe? they have antispam but it’s all portugese? or spanish? no idea
  40 00_DEAD
  41         http://openrbl.org/
  42                 as seems dead
  43                         404s
  44                         wiki is down
  45         http://mailhosts.org/
  46                 dead
  47                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
  48         blitzed.org
  49                 dead since 2006
  50                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
  51                                 referenced ML post is 404
  52         blackholes.five-ten-sg.com
  53                 Offline as of 1/1/2013
  54                         https://whatismyipaddress.com/five-ten-sg
  55         dynip.rothen.com
  56                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
  57                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
  58         fl.chickenboner.biz
  59                 dead since 2011
  60                         https://community.spiceworks.com/topic/329762-blacklist-removal
  61                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
  62                 website contains spam/crap
  63         http://cart00ney.surriel.com/
  64                 cart00ney.org is dead
  65         http://dsbl.org/
  66                 points to surriel.com
  67         http://csma.biz/
  68                 domain is for sale
  69                 dead since 2013
  70                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
  71         http://dnsbl.net.au/
  72                 website contains info about living in australia? called "AusBlog"
  73                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
  74         http://moensted.dk/spam/
  75                 dead since 2010
  76                 https://moensted.dk/spam/
  77         http://rbl.mw-internet.net/
  78                 domain was parked
  79                 2023: it is an asian(?) gambling(?) website
  80         http://www.blackholes.us/
  81                 dead since 2009
  82                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
  83         http://www.deadbeef.com/
  84                 dead, no info
  85         spamsources.dnsbl.info
  86                 dead since 2011 or so
  87                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
  88         http://www.gweep.ca/
  89                 domain dead, no other info
  90         http://www.njabl.org/
  91                 dead since 2013
  92                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
  93         http://wytnij.to/
  94                 website parked, no other info
  95         https://www.transip.nl/
  96                 dead since 2013
  97                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
  98                         https://www.blalert.com/dnsbl/residential.block.transip.nl
  99         pss.spambusters.org.ar
 100                 NXDOMAIN
 101         rbl.snark.net
 102                 NXDOMAIN
 103                 https://snark.net/ gives access denied
 104         whois.rfc-ignorant.org
 105                 NXDOMAIN
 106                 rfc-ignorant.org registered but no A/AAAA record
 107                 dead since 2012
 108                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
 109                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
 110         will-spam-for-food.eu.org
 111                 unmaintained
 112                 dead
 113                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
 114         http://proxybl.org/
 115                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
 116                 https://linuxreviews.org/Mail_Spam_Blacklists
 117                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
 118         dev.null.dk
 119                 timeout, also on the parent null.dk
 120                 effectively dead
 121         dnsbl.mags.net
 122                 seems dead, no info to be found
 123                 domain does not respond
 124         http://msrbl.blogspot.ch/
 125                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
 126                 effectively dead
 127         http://www.olsentech.net/
 128                 strange content on web
 129                 effectively dead
 130         rbl.orbitrbl.com
 131                 http://www.orbitrbl.com/
 132                 timeout
 133         rbl.polarcomm.net
 134                 NXDOMAIN
 135                 registered but no A/AAAA record
 136         cidr.bl.mcafee.com
 137                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
 138                         404
 139                 no info to be found
 140                 dead?
 141         http://anti-spam.org.cn/?locale=en_US
 142                 unreachable DNS
 143         rbl.talkactive.net
 144                 seems dead
 145                 talkactive.net redirects twice to some hosting company
 146                 last listings in 2017
 147                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
 148                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
 149         dnsbl.ipocalypse.net
 150                 no policies published
 151                 dead
 152                         was a private list of an irc network
 153                         network was renamed idlechat.net in 2014
 154                         became a discord chat in 2022(?)
 155         http://blakjak.net/RBL
 156                 external access disabled
 157                 2023: seems dead, website is a weird error
 158                 https://www.blalert.com/dnsbl/rbl.blakjak.net
 159                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
 160         http://cyberlogic.net/
 161                 french (canada)
 162                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
 163                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
 164                 https://www.dnsbl.com/2018/05/
 165                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
 166         http://www.rbl.jp/allrbl-e.html
 167                 website asks for login or just errors
 168 00_NEEDS_RECHECK
 169         https://antispam.imp.ch/
 170                 no usage policy
 171                 no return code info
 172                 no good listing policy
 173                 information received from inquiry to provider
 174                         website will be updated
 175                         return codes
 176                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
 177                                         127.0.1.8 = default
 178                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
 179                                         127.0.0.11 => REPO (Email reported as Spam by customer)
 180                                 spamrbl.imp.ch (3 days holding time)
 181                                         IPs are listed when trying to send mail to the spamtrap mailserver
 182                                         MD5 hash: attachment sent to the swinog blacklist
 183                                 wormrbl.imp.ch
 184                                         DEAD
 185         http://blacklist.woody.ch/rblcheck.php3
 186                 dead?
 187                 waiting for feedback
 188 00_NEEDS_RESEARCH
 189         bl.tiopan.com
 190         blocked.hilli.dk
 191         dialups.visi.com
 192         dnsbl.antispam.or.id
 193         dob.sibl.support-intelligence.net
 194         intruders.docs.uu.se
 195         map.spam-rbl.com
 196         rbl.triumf.ca
 197         all.s5h.net
 198                 http://www.usenix.org.uk/content/rbl.html
 199         torexit.dan.me.uk
 200         http://pedantic.org/
 201                 as of 20140701
 202         rbl.fasthosts.co.uk
 203                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
 204                 seems dead?
 205                 https://antispam.fasthosts.co.uk/
 206 00_ALIVE
 207         00_RECONSIDER
 208                 http://barracudacentral.org/rbl
 209                         requires account with extensive information (more than spamhaus e.g.):
 210                                 your name.
 211                                 your company name.
 212                                 your phone number.
 213                                 your address.
 214                                 your city name.
 215                                 your state/province name.
 216                                 your zip/postal code.
 217                                 the name of the alternate contact.
 218                                 the phone number of the alternate contact.
 219                                 the email address of the alternate contact.
 220                         seems well documented
 221         00_E_EVIL
 222                 sbl.nszones.com
 223                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
 224         00_E_INFORMATION
 225                 blacklist.sci.kun.nl
 226                         https://cncz.science.ru.nl/en/howto/email-spam/
 227                         not really its own DNSBL?
 228                         no usage information
 229                         no usage policy
 230                 http://anonmails.de/
 231                         seems serious but missing necessary info
 232                                 usage policy
 233                                 listing policy
 234                 http://blacklist.jippg.org/
 235                         no usage policy
 236                         no listing policy
 237                         no return code info
 238                 bip.virusfree.cz
 239                         used by rspamd
 240                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
 241                 https://www.nixspam.net/
 242                         previously http://www.dnsbl.manitu.net/
 243                         query zone: ix.dnsbl.manitu.net
 244                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
 245                         difficult to find info regarding listing policy
 246                         asked for more information to be added
 247                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
 248                 access.redhawk.org
 249                         website works but barely any info, not even how to query it
 250                         https://www.redhawk.org/?p=64
 251                         https://www.redhawk.org/SpamHawk/index.php
 252                 https://senderscore.org/
 253                         requires registration?
 254                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
 255                         https://senderscore.org/assess/blocklist-lookup/
 256                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
 257                         no information how to query found
 258                 mail-abuse.org
 259                         https://ers.trendmicro.com/
 260                         trendmicro paid service
 261                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
 262                                 »If you don’t create an account, you can still query the reputation of an IP address«
 263                         I don’t find any pricing or usage information
 264         00_E_PAID
 265         00_E_PRIVATE
 266                 88.blacklist.zap
 267                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
 268                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
 269                         https://www.blalert.com/dnsbl/88.blacklist.zap
 270                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
 271                         https://www.dnsbl.com/search/label/frontbridge
 272                 http://drmx.org/
 273                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
 274                 rbl.tdk.net
 275                         tdk.net seems dead on http(s)
 276                         private
 277                                 https://www.blalert.com/dnsbl/rbl.tdk.net
 278                         old link: http://postmaster.tdc.dk/publish.php?id=31787
 279                                 tdc.dk redirects to yousee.dk
 280                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
 281                 rbl.zenon.net
 282                         private
 283                                 https://www.blalert.com/dnsbl/rbl.zenon.net
 284                         http://www.noc.zenon.net/rbl/
 285                         russian(?)
 286                 https://ahbl.org/
 287                         was public until 2015
 288                         now private, invite-only
 289         http://rfc-clueless.org/
 290                 lists domains
 291                         that do not adhere to common best practices or requirements
 292                 does NOT list spammers!
 293                 listing criteria are explained well
 294                         http://rfc-clueless.org/pages/listing_policy
 295                 return codes are explained
 296                         http://rfc-clueless.org/
 297                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
 298         http://spameatingmonkey.com/
 299                 lists IPs
 300                         that sent backscatter
 301                         that sent to spamtrap
 302                         added by policy
 303                                 this includes dial-up!
 304                                 https://spameatingmonkey.com/faq/policy-based-listing
 305                 lists domains/URIs
 306                         by age
 307                         in spam bodies
 308                 usage policy seems clear
 309                         https://spameatingmonkey.com/faq/query-limits
 310                 listing policy seems clear
 311                         https://spameatingmonkey.com/services
 312                 return codes documented
 313                         https://spameatingmonkey.com/services
 314         http://uribl.com/
 315                 lists domains/URIs
 316                         that appear in spam bodies
 317                         has whitelist
 318                 lists IPs
 319                         that URIs in spam bodies resolve to
 320                 return codes are documented
 321                         https://uribl.com/about.shtml#implementation
 322                         bitmasked
 323                         127.0.0.1 is used to signal abusive query behaviour
 324         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
 325                 called "hostkarma"
 326                 lists domains/URIs
 327                 lists IPs
 328                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
 329                 listing policy is documented
 330                 return codes are documented
 331                 seems very trustworthy
 332         http://www.sorbs.net/
 333                 good reputation
 334                 lists domains/URIs
 335                 lists IPs
 336                 usage policy is clear that it’s free
 337                 listing policy is documented
 338                 return codes are documented
 339                 seems trustworthy
 340         http://www.spamhaus.org/
 341                 good reputation
 342                 very well done
 343                 seems very professional
 344                 lists domains/URIs
 345                 lists IPs
 346                 usage policy is clear
 347                         https://www.spamhaus.org/organization/dnsblusage/
 348                 listing policies are clearly documented
 349                 return codes are clearly documented
 350         http://www.surbl.org/
 351                 good reputation
 352                 lists domains/URIs
 353                 usage policy is clear
 354                         https://surbl.org/usage-policy
 355                 listing policy is documented
 356                 return codes are documented
 357                         bitmasked
 358                         127.0.0.1 means blocked
 359         http://zapbl.net/
 360                 lists domains/URIs
 361                 lists IPs
 362                 listing policy seems clear
 363                         https://zapbl.net/policy
 364                 usage policy seems clearly free for everyone
 365                         https://zapbl.net/using
 366                 return codes are documented
 367                 seems well done
 368         https://rbl.foobar.hu/
 369         http://apews.org/?page=filter
 370                 questionable
 371         http://www.spamhauswhitelist.com/en/
 372         https://www.dnswl.org/
 373         00_E_FOCUS
 374                 http://stopspam.org/rblcheck/index.php
 375                         different kinds of lists
 376                         none usable for me
 377                 http://www.dnsblchile.org/
 378                         chilenian spam
 379         00_LISTS_BLOGSPAMMERS
 380                 http://blogspambl.com/
 381                 https://www.madavi.de/madavibl/
 382                 http://bsb.empty.us/
 383         00_LISTS_COUNTRIES
 384                 http://countries.nerd.dk/
 385                 korea
 386                         http://korea.services.net/
 387         00_LISTS_DIALUPS
 388                 http://dul.ru/dul.en.html
 389                         DEAD for sale
 390         00_LISTS_OPENRESOLVERS
 391                 http://dns.measurement-factory.com/surveys/openresolvers.html
 392         00_LISTS_TORNODES
 393                 http://www.sectoor.de/tor.php
 394                 https://www.dan.me.uk/dnsbl
 395         https://0spam.org/
 396                 clear information on usage policy
 397                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
 398                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
 399                 seems serious
 400                 listing policies are a little less clear
 401                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
 402                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
 403                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
 404                 return codes not very clear
 405         http://anticaptcha.net/
 406         http://blacklist.lashback.com/
 407                 http://ubl.unsubscore.com
 408         http://blacklist.woody.ch/rblcheck.php3
 409         http://cbl.abuseat.org/
 410         http://dnsbl.burnt-tech.com/
 411         http://dnsbl.iip.lu/
 412         http://dnsbl.inps.de/
 413         http://dnsbl.tornevall.org/
 414         http://dronebl.org/
 415         http://mailspike.net/usage.html
 416         http://psbl.org/
 417                 query zone: psbl.surriel.com
 418         http://rbl.dns-servicios.com/rbl.php
 419         http://rbl.schulte.org/
 420         http://rbldata.interserver.net/
 421                 may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
 422         http://relaytest.kundenserver.de/
 423         http://rv-soft.info/
 424         http://spamcannibal.org/dnsbl_check.shtml
 425         http://spamrats.com/
 426         http://spamstinks.com/
 427         http://st.technovision.dk/
 428         http://tor.efnet.org/
 429                 http://rbl.efnetrbl.org/ MIRROR
 430         http://v4bl.org/
 431         http://virbl.bit.nl/
 432         http://wpbl.info/
 433         http://www.aupads.org/
 434         http://www.backscatterer.org/
 435                 fragwuerdige policy - bezahlen fuer schnelleres delisting
 436         http://www.blockedservers.com/
 437         http://www.blocklist.de/en/index.html
 438         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
 439         http://www.gbudb.com/truncate/
 440         http://www.justspam.org/
 441         http://www.kempt.net/dnsbl/
 442         http://www.leadmon.net/spamguard/
 443         http://www.rbl.jp/allrbl-e.html
 444         http://www.spamcop.net/
 445                 good policy
 446                 good reputation
 447         http://www.spamsources.fabel.dk/
 448                 sensible policy
 449         http://www.srntools.com/blacklist/
 450         http://www.uceprotect.net/en/index.php
 451         http://www.usenix.org.uk/content/rbl.html
 452         http://zapbl.net/
 453         https://bl.konstant.no/
 454         https://choon.net/rbl.php
 455         https://puck.nether.net/or/
 456                 might be good
 457         https://rbl.foobar.hu/
 458         https://www.abuse.ch/
 459                 https://www.abuse.ch/?tag=httpbl
 460         https://www.kisarbl.or.kr/
 461         https://www.megarbl.net/
 462         https://www.team-cymru.org/Services/Bogons/dns.html
 463         http://mailspike.net/usage.html
 464                 reputation-based
 465         http://www.spamhauswhitelist.com/en/
 466                 policies for listing and usage on the website
 467         http://www.whitelisted.org/
 468                 paid subscription
 469                 policy on site
 470         https://puck.nether.net/or/
 471                 policies on website
 472         https://rbl.foobar.hu/
 473                 usage and listing policies on website
 474         http://www.isipp.com/email-accreditation/iadb-query-instruction/
 475                 requires signup
 476         https://choon.net/rbl.php
 477                 not quite a usage policy, but seems ok
 478                 strange split of ipv4 and ipv6
 479                 seems dead?
 480         https://www.dnswl.org/