]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/blob - dnslists.otl
fix: cleanup duplicates
[user/henk/docs/dnsbl_notes.git] / dnslists.otl
1 TODO
2         check and link (de)listing policy
3                 NOGO: delisting for money
4         check and link usage policy
5         check and link return codes
6         find newsfeed or mailinglist
7         give feedback?
8         implement in exim
9         implement in SA
10         implement in rspamd
11 implement
12         https://abuse.ro/
13                 policy
14                         spamtraps
15                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
16                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
17                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
18 00_META
19         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
20         http://www.blalert.com/dnsbls
21         http://www.dnsbl.info/dnsbl-list.php
22         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
23         http://www.sdsc.edu/~jeff/spam/cbc.html
24         http://moensted.dk/spam/
25         https://whatismyipaddress.com/blacklist-check
26         https://multirbl.valli.org/
27         https://glockapps.com/blacklist/
28         https://docs.hetrixtools.com/monitored-blacklists/
29         https://www.blacklistmaster.com/
30         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
31         https://github.com/zbetcheckin/DNSBLs
32 00_ELANG
33         http://dnsbl.aspnet.hu/
34                 hungarian?
35         http://spam-rbl.fr/
36                 french
37         https://mav.com.br/
38                 maybe? they have antispam but it’s all portugese? or spanish? no idea
39 00_DEAD
40         http://openrbl.org/
41                 as seems dead
42                         404s
43                         wiki is down
44         http://mailhosts.org/
45                 dead
46                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
47         blitzed.org
48                 dead since 2006
49                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
50                                 referenced ML post is 404
51         blackholes.five-ten-sg.com
52                 Offline as of 1/1/2013
53                         https://whatismyipaddress.com/five-ten-sg
54         dynip.rothen.com
55                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
56                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
57         fl.chickenboner.biz
58                 dead since 2011
59                         https://community.spiceworks.com/topic/329762-blacklist-removal
60                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
61                 website contains spam/crap
62         http://cart00ney.surriel.com/
63                 cart00ney.org is dead
64         http://dsbl.org/
65                 points to surriel.com
66         http://csma.biz/
67                 domain is for sale
68                 dead since 2013
69                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
70         http://dnsbl.net.au/
71                 website contains info about living in australia? called "AusBlog"
72                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
73         http://moensted.dk/spam/
74                 dead since 2010
75                 https://moensted.dk/spam/
76         http://rbl.mw-internet.net/
77                 domain was parked
78                 2023: it is an asian(?) gambling(?) website
79         http://www.blackholes.us/
80                 dead since 2009
81                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
82         http://www.deadbeef.com/
83                 dead, no info
84         spamsources.dnsbl.info
85                 dead since 2011 or so
86                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
87         http://www.gweep.ca/
88                 domain dead, no other info
89         http://www.njabl.org/
90                 dead since 2013
91                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
92         http://wytnij.to/
93                 website parked, no other info
94         https://www.transip.nl/
95                 dead since 2013
96                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
97                         https://www.blalert.com/dnsbl/residential.block.transip.nl
98         pss.spambusters.org.ar
99                 NXDOMAIN
100         rbl.snark.net
101                 NXDOMAIN
102                 https://snark.net/ gives access denied
103         whois.rfc-ignorant.org
104                 NXDOMAIN
105                 rfc-ignorant.org registered but no A/AAAA record
106                 dead since 2012
107                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
108                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
109         will-spam-for-food.eu.org
110                 unmaintained
111                 dead
112                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
113         http://proxybl.org/
114                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
115                 https://linuxreviews.org/Mail_Spam_Blacklists
116                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
117         dev.null.dk
118                 timeout, also on the parent null.dk
119                 effectively dead
120         dnsbl.mags.net
121                 seems dead, no info to be found
122                 domain does not respond
123         http://msrbl.blogspot.ch/
124                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
125                 effectively dead
126         http://www.olsentech.net/
127                 strange content on web
128                 effectively dead
129         rbl.orbitrbl.com
130                 http://www.orbitrbl.com/
131                 timeout
132         rbl.polarcomm.net
133                 NXDOMAIN
134                 registered but no A/AAAA record
135         cidr.bl.mcafee.com
136                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
137                         404
138                 no info to be found
139                 dead?
140         http://anti-spam.org.cn/?locale=en_US
141                 unreachable DNS
142         rbl.talkactive.net
143                 seems dead
144                 talkactive.net redirects twice to some hosting company
145                 last listings in 2017
146                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
147                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
148         dnsbl.ipocalypse.net
149                 no policies published
150                 dead
151                         was a private list of an irc network
152                         network was renamed idlechat.net in 2014
153                         became a discord chat in 2022(?)
154         http://blakjak.net/RBL
155                 external access disabled
156                 2023: seems dead, website is a weird error
157                 https://www.blalert.com/dnsbl/rbl.blakjak.net
158                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
159         http://cyberlogic.net/
160                 french (canada)
161                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
162                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
163                 https://www.dnsbl.com/2018/05/
164                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
165         http://www.rbl.jp/allrbl-e.html
166                 website asks for login or just errors
167 00_NEEDS_RECHECK
168         https://antispam.imp.ch/
169                 no usage policy
170                 no return code info
171                 no good listing policy
172                 information received from inquiry to provider
173                         website will be updated
174                         return codes
175                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
176                                         127.0.1.8 = default
177                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
178                                         127.0.0.11 => REPO (Email reported as Spam by customer)
179                                 spamrbl.imp.ch (3 days holding time)
180                                         IPs are listed when trying to send mail to the spamtrap mailserver
181                                         MD5 hash: attachment sent to the swinog blacklist
182                                 wormrbl.imp.ch
183                                         DEAD
184         http://blacklist.woody.ch/rblcheck.php3
185                 dead?
186                 waiting for feedback
187 00_NEEDS_RESEARCH
188         bl.tiopan.com
189         blocked.hilli.dk
190         dialups.visi.com
191         dnsbl.antispam.or.id
192         dob.sibl.support-intelligence.net
193         intruders.docs.uu.se
194         map.spam-rbl.com
195         rbl.triumf.ca
196         all.s5h.net
197                 http://www.usenix.org.uk/content/rbl.html
198         torexit.dan.me.uk
199         http://pedantic.org/
200                 as of 20140701
201         rbl.fasthosts.co.uk
202                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
203                 seems dead?
204                 https://antispam.fasthosts.co.uk/
205 00_ALIVE
206         00_RECONSIDER
207                 http://barracudacentral.org/rbl
208                         requires account with extensive information (more than spamhaus e.g.):
209                                 your name.
210                                 your company name.
211                                 your phone number.
212                                 your address.
213                                 your city name.
214                                 your state/province name.
215                                 your zip/postal code.
216                                 the name of the alternate contact.
217                                 the phone number of the alternate contact.
218                                 the email address of the alternate contact.
219                         seems well documented
220         00_E_EVIL
221                 sbl.nszones.com
222                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
223         00_E_INFORMATION
224                 blacklist.sci.kun.nl
225                         https://cncz.science.ru.nl/en/howto/email-spam/
226                         not really its own DNSBL?
227                         no usage information
228                         no usage policy
229                 http://anonmails.de/
230                         seems serious but missing necessary info
231                                 usage policy
232                                 listing policy
233                 http://blacklist.jippg.org/
234                         no usage policy
235                         no listing policy
236                         no return code info
237                 bip.virusfree.cz
238                         used by rspamd
239                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
240                 https://www.nixspam.net/
241                         previously http://www.dnsbl.manitu.net/
242                         query zone: ix.dnsbl.manitu.net
243                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
244                         difficult to find info regarding listing policy
245                         asked for more information to be added
246                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
247                 access.redhawk.org
248                         website works but barely any info, not even how to query it
249                         https://www.redhawk.org/?p=64
250                         https://www.redhawk.org/SpamHawk/index.php
251                 https://senderscore.org/
252                         requires registration?
253                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
254                         https://senderscore.org/assess/blocklist-lookup/
255                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
256                         no information how to query found
257                 mail-abuse.org
258                         https://ers.trendmicro.com/
259                         trendmicro paid service
260                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
261                                 »If you don’t create an account, you can still query the reputation of an IP address«
262                         I don’t find any pricing or usage information
263         00_E_PAID
264         00_E_PRIVATE
265                 88.blacklist.zap
266                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
267                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
268                         https://www.blalert.com/dnsbl/88.blacklist.zap
269                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
270                         https://www.dnsbl.com/search/label/frontbridge
271                 http://drmx.org/
272                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
273                 rbl.tdk.net
274                         tdk.net seems dead on http(s)
275                         private
276                                 https://www.blalert.com/dnsbl/rbl.tdk.net
277                         old link: http://postmaster.tdc.dk/publish.php?id=31787
278                                 tdc.dk redirects to yousee.dk
279                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
280                 rbl.zenon.net
281                         private
282                                 https://www.blalert.com/dnsbl/rbl.zenon.net
283                         http://www.noc.zenon.net/rbl/
284                         russian(?)
285                 https://ahbl.org/
286                         was public until 2015
287                         now private, invite-only
288         http://rfc-clueless.org/
289                 lists domains
290                         that do not adhere to common best practices or requirements
291                 does NOT list spammers!
292                 listing criteria are explained well
293                         http://rfc-clueless.org/pages/listing_policy
294                 return codes are explained
295                         http://rfc-clueless.org/
296                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
297         http://spameatingmonkey.com/
298                 lists IPs
299                         that sent backscatter
300                         that sent to spamtrap
301                         added by policy
302                                 this includes dial-up!
303                                 https://spameatingmonkey.com/faq/policy-based-listing
304                 lists domains/URIs
305                         by age
306                         in spam bodies
307                 usage policy seems clear
308                         https://spameatingmonkey.com/faq/query-limits
309                 listing policy seems clear
310                         https://spameatingmonkey.com/services
311                 return codes documented
312                         https://spameatingmonkey.com/services
313         http://uribl.com/
314                 lists domains/URIs
315                         that appear in spam bodies
316                         has whitelist
317                 lists IPs
318                         that URIs in spam bodies resolve to
319                 return codes are documented
320                         https://uribl.com/about.shtml#implementation
321                         bitmasked
322                         127.0.0.1 is used to signal abusive query behaviour
323         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
324                 called "hostkarma"
325                 lists domains/URIs
326                 lists IPs
327                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
328                 listing policy is documented
329                 return codes are documented
330                 seems very trustworthy
331         http://www.sorbs.net/
332                 good reputation
333                 lists domains/URIs
334                 lists IPs
335                 usage policy is clear that it’s free
336                 listing policy is documented
337                 return codes are documented
338                 seems trustworthy
339         http://www.spamhaus.org/
340                 good reputation
341                 very well done
342                 seems very professional
343                 lists domains/URIs
344                 lists IPs
345                 usage policy is clear
346                         https://www.spamhaus.org/organization/dnsblusage/
347                 listing policies are clearly documented
348                 return codes are clearly documented
349         http://www.surbl.org/
350         http://zapbl.net/
351         https://rbl.foobar.hu/
352         http://apews.org/?page=filter
353                 questionable
354         http://www.spamhauswhitelist.com/en/
355         https://www.dnswl.org/
356         00_E_FOCUS
357                 http://stopspam.org/rblcheck/index.php
358                         different kinds of lists
359                         none usable for me
360                 http://www.dnsblchile.org/
361                         chilenian spam
362         00_LISTS_BLOGSPAMMERS
363                 http://blogspambl.com/
364                 https://www.madavi.de/madavibl/
365                 http://bsb.empty.us/
366         00_LISTS_COUNTRIES
367                 http://countries.nerd.dk/
368                 korea
369                         http://korea.services.net/
370         00_LISTS_DIALUPS
371                 http://dul.ru/dul.en.html
372                         DEAD for sale
373         00_LISTS_OPENRESOLVERS
374                 http://dns.measurement-factory.com/surveys/openresolvers.html
375         00_LISTS_TORNODES
376                 http://www.sectoor.de/tor.php
377                 https://www.dan.me.uk/dnsbl
378         https://0spam.org/
379                 clear information on usage policy
380                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
381                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
382                 seems serious
383                 listing policies are a little less clear
384                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
385                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
386                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
387                 return codes not very clear
388         http://anticaptcha.net/
389         http://blacklist.lashback.com/
390                 http://ubl.unsubscore.com
391         http://blacklist.woody.ch/rblcheck.php3
392         http://cbl.abuseat.org/
393         http://dnsbl.burnt-tech.com/
394         http://dnsbl.iip.lu/
395         http://dnsbl.inps.de/
396         http://dnsbl.tornevall.org/
397         http://dronebl.org/
398         http://mailspike.net/usage.html
399         http://psbl.org/
400                 query zone: psbl.surriel.com
401         http://rbl.dns-servicios.com/rbl.php
402         http://rbl.schulte.org/
403         http://rbldata.interserver.net/
404                 may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
405         http://relaytest.kundenserver.de/
406         http://rv-soft.info/
407         http://spamcannibal.org/dnsbl_check.shtml
408         http://spamrats.com/
409         http://spamstinks.com/
410         http://st.technovision.dk/
411         http://tor.efnet.org/
412                 http://rbl.efnetrbl.org/ MIRROR
413         http://v4bl.org/
414         http://virbl.bit.nl/
415         http://wpbl.info/
416         http://www.aupads.org/
417         http://www.backscatterer.org/
418                 fragwuerdige policy - bezahlen fuer schnelleres delisting
419         http://www.blockedservers.com/
420         http://www.blocklist.de/en/index.html
421         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
422         http://www.gbudb.com/truncate/
423         http://www.justspam.org/
424         http://www.kempt.net/dnsbl/
425         http://www.leadmon.net/spamguard/
426         http://www.rbl.jp/allrbl-e.html
427         http://www.spamcop.net/
428                 good policy
429                 good reputation
430         http://www.spamsources.fabel.dk/
431                 sensible policy
432         http://www.srntools.com/blacklist/
433         http://www.uceprotect.net/en/index.php
434         http://www.usenix.org.uk/content/rbl.html
435         http://zapbl.net/
436         https://bl.konstant.no/
437         https://choon.net/rbl.php
438         https://puck.nether.net/or/
439                 might be good
440         https://rbl.foobar.hu/
441         https://www.abuse.ch/
442                 https://www.abuse.ch/?tag=httpbl
443         https://www.kisarbl.or.kr/
444         https://www.megarbl.net/
445         https://www.team-cymru.org/Services/Bogons/dns.html
446         http://mailspike.net/usage.html
447                 reputation-based
448         http://www.spamhauswhitelist.com/en/
449                 policies for listing and usage on the website
450         http://www.whitelisted.org/
451                 paid subscription
452                 policy on site
453         https://puck.nether.net/or/
454                 policies on website
455         https://rbl.foobar.hu/
456                 usage and listing policies on website
457         http://www.isipp.com/email-accreditation/iadb-query-instruction/
458                 requires signup
459         https://choon.net/rbl.php
460                 not quite a usage policy, but seems ok
461                 strange split of ipv4 and ipv6
462                 seems dead?
463         https://www.dnswl.org/