update virbl.bit.nl

[user/henk/docs/dnsbl_notes.git] / dnslists.otl

diff --git a/dnslists.otl b/dnslists.otl
index 312ce13a94bc7e420db2850ff7693cecb6b95454..6e5877643cd6db5cb4bf78e35cf73b433a926036 100644 (file)
--- a/dnslists.otl
+++ b/dnslists.otl
@@ -23,6 +23,7 @@ TODO
        https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
        https://github.com/zbetcheckin/DNSBLs
        https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
        https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
        https://github.com/zbetcheckin/DNSBLs
        https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists

+       https://www.impressionwise.com/kb/threats/rbl-advisories.html

 00_ELANG
        http://dnsbl.aspnet.hu/
                hungarian?
 00_ELANG
        http://dnsbl.aspnet.hu/
                hungarian?


@@ -187,6 +188,19 @@ TODO
                        changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
        http://dnsbl.burnt-tech.com/
                domain is for sale
                        changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
        http://dnsbl.burnt-tech.com/
                domain is for sale

+       http://rbl.dns-servicios.com/rbl.php
+               website can not be found
+       http://spamcannibal.org/
+               dead, as of at least 2018
+       http://st.technovision.dk/
+               https://docs.hetrixtools.com/st-technovision-dk-inactive-removed/
+                       [December 8, 2021] This RBL has stopped responding to DNS queries.
+       http://spamstinks.com/
+               cert is for generic hostname
+               website shows some login form
+       http://virbl.bit.nl/
+               https://www.rollernet.us/2017/01/shutdown-of-virbl-dnsbl-bit-nl/
+                       January 23, 2017: »The Virbl-project site has been replaced by this static message to inform those that find their ways here. The Virbl DNSBL-zone was emptied and will be removed all together at a moment further on in the future.«

 00_NEEDS_RECHECK
        https://antispam.imp.ch/
                no usage policy
 00_NEEDS_RECHECK
        https://antispam.imp.ch/
                no usage policy


@@ -305,6 +319,17 @@ TODO
                        seems a bit unstructured and not very well documented
                                I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
                        seems active
                        seems a bit unstructured and not very well documented
                                I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
                        seems active

+               http://rbl.schulte.org/
+                       seems active
+                       listing policy seems to be: they received spam from an IP
+                       usage policy: Anyone can use this RBL list [sic]
+                       return codes: probably boolean, i.e. either listed or not
+               http://relaytest.kundenserver.de/
+                       by 1und1 (now ionos?), used internally
+                       https://www.blalert.com/dnsbl/relays.bl.kundenserver.de
+                       no usage policy found
+                       no listing policy found
+                       no return code explanation found

        00_E_PAID
        00_E_PRIVATE
                88.blacklist.zap
        00_E_PAID
        00_E_PRIVATE
                88.blacklist.zap


@@ -454,6 +479,10 @@ TODO
        00_LISTS_OPENRESOLVERS
        00_LISTS_TORNODES
                https://www.dan.me.uk/dnsbl
        00_LISTS_OPENRESOLVERS
        00_LISTS_TORNODES
                https://www.dan.me.uk/dnsbl

+               http://rbl.efnetrbl.org/
+                       aka http://tor.efnet.org/
+                       lists IPs
+                       lists open proxies, infected machines, tornodes, etc.

        https://0spam.org/
                clear information on usage policy
                        Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
        https://0spam.org/
                clear information on usage policy
                        Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.


@@ -484,20 +513,25 @@ TODO
                        no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
                return codes
                        not documented, probably only boolean
                        no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
                return codes
                        not documented, probably only boolean

-       http://rbl.dns-servicios.com/rbl.php
-       http://rbl.schulte.org/

        http://rbldata.interserver.net/
        http://rbldata.interserver.net/

-               may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
-       http://relaytest.kundenserver.de/
+               listing policy more or less clear
+               usage policy not given but since usage is explained it’s probably free for all
+               return codes seem to be binary, i.e. either listed or not
+               lists IPs
+               lists domains/URIs

        http://rv-soft.info/
        http://rv-soft.info/

-       http://spamcannibal.org/dnsbl_check.shtml
+               usage policy not explicit but seems to be free
+               listing policy also not explicit but can be inferred from return code explanation
+               return codes are explained

        http://spamrats.com/
        http://spamrats.com/

-       http://spamstinks.com/
-       http://st.technovision.dk/
-       http://tor.efnet.org/
-               http://rbl.efnetrbl.org/ MIRROR
+               clear usage policy (ToS)
+               listing policies documented
+               return codes of aggregated list documented
+               lists IPs

        http://v4bl.org/
        http://v4bl.org/

-       http://virbl.bit.nl/
+               usage policy documented
+               listing policy not really clear
+               return codes documented

        http://wpbl.info/
        http://www.aupads.org/
        http://www.backscatterer.org/
        http://wpbl.info/
        http://www.aupads.org/
        http://www.backscatterer.org/