]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/blobdiff - dnslists.otl
update dnsbl.tornevall.org
[user/henk/docs/dnsbl_notes.git] / dnslists.otl
index 8c50487e779a313b4bc689f3041cb7aeca25e5a5..5c4d777323262d3720f128c29246988ddcddb543 100644 (file)
@@ -28,6 +28,8 @@ implement
        https://docs.hetrixtools.com/monitored-blacklists/
        https://www.blacklistmaster.com/
        https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
+       https://github.com/zbetcheckin/DNSBLs
+       https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
 00_ELANG
        http://dnsbl.aspnet.hu/
                hungarian?
@@ -40,6 +42,9 @@ implement
                as seems dead
                        404s
                        wiki is down
+       http://mailhosts.org/
+               dead
+                       https://www.blalert.com/dnsbl/shortlist.mailhosts.org
        blitzed.org
                dead since 2006
                        https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
@@ -147,7 +152,84 @@ implement
                        was a private list of an irc network
                        network was renamed idlechat.net in 2014
                        became a discord chat in 2022(?)
+       http://blakjak.net/RBL
+               external access disabled
+               2023: seems dead, website is a weird error
+               https://www.blalert.com/dnsbl/rbl.blakjak.net
+                       This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
+       http://cyberlogic.net/
+               french (canada)
+               https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
+                       On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
+               https://www.dnsbl.com/2018/05/
+                       As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
+       http://www.rbl.jp/allrbl-e.html
+               website asks for login or just errors
+       http://www.spamhauswhitelist.com/en/
+               looks like a parked domain with ads
+       http://stopspam.org/rblcheck/index.php
+               aka dul.pacifier.net
+               http://www.stopspam.org/rbl-info/
+                       stopped in 2013
+       http://countries.nerd.dk/
+               unable to connect, also for nerd.dk
+       http://dul.ru/dul.en.html
+               DEAD for sale
+       http://dns.measurement-factory.com/surveys/openresolvers.html
+               dead
+                       »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
+       http://www.sectoor.de/tor.php
+               timeouts
+       http://anticaptcha.net/
+               for sale
+       http://blacklist.lashback.com/
+               query zone: ubl.unsubscore.com
+               provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
+               rsync URLs seem dead, so does the download url
+       http://blacklist.woody.ch/
+               no entries in the displayed "top 100"
+               may have been absorbed into the swinog blacklists, see antispam.imp.ch
+       http://cbl.abuseat.org/
+               https://www.abuseat.org/
+                       changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
+       http://dnsbl.burnt-tech.com/
+               domain is for sale
 00_NEEDS_RECHECK
+       https://antispam.imp.ch/
+               no usage policy
+               no return code info
+               no good listing policy
+               information received from inquiry to provider
+                       website will be updated
+                       return codes
+                               dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
+                                       127.0.1.8 = default
+                                       127.0.0.10 => TRAP (Email sent to a spamtrap)
+                                       127.0.0.11 => REPO (Email reported as Spam by customer)
+                               spamrbl.imp.ch (3 days holding time)
+                                       IPs are listed when trying to send mail to the spamtrap mailserver
+                                       MD5 hash: attachment sent to the swinog blacklist
+                               wormrbl.imp.ch
+                                       DEAD
+       http://blacklist.woody.ch/rblcheck.php3
+               dead?
+               waiting for feedback
+       http://dnsbl.iip.lu/
+               https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
+                       in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
+               https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
+                       This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
+       http://dnsbl.inps.de/
+               timeout
+               https://www.dnsbl.com/search/label/dnsbl.inps.de
+                       Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
+               https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
+                       [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
+               https://glockapps.com/blacklist/dnsbl-inps-de/
+                       Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
+               https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
+                       This blacklist is offline as of May 1, 2020.
+               https://web.archive.org/web/20220428013500/http://www.inps.de/
 00_NEEDS_RESEARCH
        bl.tiopan.com
        blocked.hilli.dk
@@ -167,6 +249,20 @@ implement
                seems dead?
                https://antispam.fasthosts.co.uk/
 00_ALIVE
+       00_RECONSIDER
+               http://barracudacentral.org/rbl
+                       requires account with extensive information (more than spamhaus e.g.):
+                               your name.
+                               your company name.
+                               your phone number.
+                               your address.
+                               your city name.
+                               your state/province name.
+                               your zip/postal code.
+                               the name of the alternate contact.
+                               the phone number of the alternate contact.
+                               the email address of the alternate contact.
+                       seems well documented
        00_E_EVIL
                sbl.nszones.com
                        http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
@@ -217,176 +313,227 @@ implement
                        https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
                        https://www.blalert.com/dnsbl/88.blacklist.zap
                                88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
-               http://barracudacentral.org/rbl
-                       requires account
-               http://blakjak.net/RBL
-                       external access disabled
-               http://cyberlogic.net/
-               http://drmx.org/usage.php
-                       Use of any DrMX.ORG DNS Zone is by request and by contract only.
+                       https://www.dnsbl.com/search/label/frontbridge
+               http://drmx.org/
+                       »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
                rbl.tdk.net
+                       tdk.net seems dead on http(s)
                        private
-                       http://postmaster.tdc.dk/publish.php?id=31787
+                               https://www.blalert.com/dnsbl/rbl.tdk.net
+                       old link: http://postmaster.tdc.dk/publish.php?id=31787
+                               tdc.dk redirects to yousee.dk
+                               https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
                rbl.zenon.net
                        private
+                               https://www.blalert.com/dnsbl/rbl.zenon.net
                        http://www.noc.zenon.net/rbl/
-               http://ahbl.org/node
+                       russian(?)
+               https://ahbl.org/
                        was public until 2015
                        now private, invite-only
-       00_LISTS_DOMAINS
-               00_IN_USE_EXIM
-                       http://0spam.fusionzero.com/
-                       http://antispam.imp.ch/05-uribl.php?lng=0
-                       http://blacklist.woody.ch/rblcheck.php3
-                       http://mailhosts.org/
+       http://rfc-clueless.org/
+               lists domains
+                       that do not adhere to common best practices or requirements
+               does NOT list spammers!
+               listing criteria are explained well
+                       http://rfc-clueless.org/pages/listing_policy
+               return codes are explained
                        http://rfc-clueless.org/
-                       http://spameatingmonkey.com/lists.html
-                       http://uribl.com/
-                       http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
-                       http://www.rbl.jp/allrbl-e.html
-                       http://www.sorbs.net/
-                               good reputation
-                               seems sensible
-                               different kinds of lists
-                       http://www.spamhaus.org/
-                               good reputation
-                               very well done
-                               different kinds of lists!
-                       http://www.surbl.org/
-                       http://zapbl.net/
-                       https://rbl.foobar.hu/
-               http://apews.org/?page=filter
-                       questionable
-       00_LISTS_DOMAINS_TRUSTED
-               00_IN_USE_EXIM
-                       http://mailhosts.org/rhswl/
-                       http://uribl.com/
-                       http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
-                       http://www.spamhauswhitelist.com/en/
-                       https://www.dnswl.org/
-       00_LISTS_IPS
-               00_E_FOCUS
-                       http://stopspam.org/rblcheck/index.php
-                               different kinds of lists
-                               none usable for me
-                       http://www.dnsblchile.org/
-                               chilenian spam
-               00_LISTS_BLOGSPAMMERS
-                       http://blogspambl.com/
-                       https://www.madavi.de/madavibl/
-                       http://bsb.empty.us/
-               00_LISTS_COUNTRIES
-                       http://countries.nerd.dk/
-                       korea
-                               http://korea.services.net/
-               00_LISTS_DIALUPS
-                       http://dul.ru/dul.en.html
-                               DEAD for sale
-               00_LISTS_OPENRESOLVERS
-                       http://dns.measurement-factory.com/surveys/openresolvers.html
-               00_LISTS_TORNODES
-                       http://www.sectoor.de/tor.php
-                       https://www.dan.me.uk/dnsbl
-               http://0spam.fusionzero.com/
-               http://anticaptcha.net/
-               http://antispam.imp.ch/03-wormlist.html?lng=0
-               http://antispam.imp.ch/04-spamlist.html?lng=0
-               http://antispam.imp.ch/06-dnsbl.php?lng=0
-               http://blacklist.lashback.com/
-                       http://ubl.unsubscore.com
-               http://blacklist.woody.ch/rblcheck.php3
-               http://cbl.abuseat.org/
-               http://dnsbl.burnt-tech.com/
-               http://dnsbl.iip.lu/
-               http://dnsbl.inps.de/
-               http://dnsbl.tornevall.org/
-               http://dronebl.org/
-               http://mailhosts.org/
-               http://mailhosts.org/ipbl/
-               http://mailspike.net/usage.html
-               http://psbl.org/
-                       query zone: psbl.surriel.com
-               http://rbl.dns-servicios.com/rbl.php
-               http://rbl.schulte.org/
-               http://rbldata.interserver.net/
-                       may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
-               http://relaytest.kundenserver.de/
-               http://rv-soft.info/
-               http://spamcannibal.org/dnsbl_check.shtml
-               http://spameatingmonkey.com/lists.html
-               http://spamrats.com/
-               http://spamstinks.com/
-               http://st.technovision.dk/
-               http://tor.efnet.org/
-                       http://rbl.efnetrbl.org/ MIRROR
-               http://v4bl.org/
-               http://virbl.bit.nl/
-               http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
-               http://wpbl.info/
-               http://www.aupads.org/
-               http://www.backscatterer.org/
-                       fragwuerdige policy - bezahlen fuer schnelleres delisting
-               http://www.blockedservers.com/
-               http://www.blocklist.de/en/index.html
-               http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
-               http://www.gbudb.com/truncate/
-               http://www.justspam.org/
-               http://www.kempt.net/dnsbl/
-               http://www.leadmon.net/spamguard/
-               http://www.rbl.jp/allrbl-e.html
-               http://www.sorbs.net/
-                       good reputation
-                       seems sensible
-                       different kinds of lists
-               http://www.spamcop.net/
-                       good policy
-                       good reputation
-               http://www.spamhaus.org/
-                       good reputation
-                       very well done
-                       different kinds of lists!
-               http://www.spamsources.fabel.dk/
-                       sensible policy
-               http://www.srntools.com/blacklist/
-               http://www.uceprotect.net/en/index.php
-               http://www.usenix.org.uk/content/rbl.html
-               http://zapbl.net/
-               https://bl.konstant.no/
-               https://choon.net/rbl.php
-               https://puck.nether.net/or/
-                       might be good
-               https://rbl.foobar.hu/
-               https://www.abuse.ch/
-                       https://www.abuse.ch/?tag=httpbl
-               https://www.kisarbl.or.kr/
-               https://www.megarbl.net/
-               https://www.team-cymru.org/Services/Bogons/dns.html
-       00_LISTS_IPS_TRUSTED
-               00_IN_USE_EXIM
-                       http://0spam.fusionzero.com/
-                               uses spamtraps
-                       http://mailhosts.org/ipwl/
-                               manual listing
-                       http://mailspike.net/usage.html
-                               reputation-based
-                       http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
-                               very nice project!
-                       http://www.spamhauswhitelist.com/en/
-                               policies for listing and usage on the website
-                       http://www.whitelisted.org/
-                               paid subscription
-                               policy on site
-                       https://puck.nether.net/or/
-                               policies on website
-                       https://rbl.foobar.hu/
-                               usage and listing policies on website
-               http://spameatingmonkey.com/lists.html
-                       whitelist zone not mentioned
-                       support request sent
-               http://www.isipp.com/email-accreditation/iadb-query-instruction/
-                       requires signup
-               https://choon.net/rbl.php
-                       not quite a usage policy, but seems ok
-                       strange split of ipv4 and ipv6
-                       seems dead?
-               https://www.dnswl.org/
+               usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
+               many timeouts
+                       first noticed in 2014 and deactivated
+                       retried in 2023 and still the case
+       http://spameatingmonkey.com/
+               lists IPs
+                       that sent backscatter
+                       that sent to spamtrap
+                       added by policy
+                               this includes dial-up!
+                               https://spameatingmonkey.com/faq/policy-based-listing
+               lists domains/URIs
+                       by age
+                       in spam bodies
+               usage policy seems clear
+                       https://spameatingmonkey.com/faq/query-limits
+               listing policy seems clear
+                       https://spameatingmonkey.com/services
+               return codes documented
+                       https://spameatingmonkey.com/services
+               http://blogspambl.com/
+                       redirects to spameatingmonkey.com
+       http://uribl.com/
+               lists domains/URIs
+                       that appear in spam bodies
+                       has whitelist
+               lists IPs
+                       that URIs in spam bodies resolve to
+               return codes are documented
+                       https://uribl.com/about.shtml#implementation
+                       bitmasked
+                       127.0.0.1 is used to signal abusive query behaviour
+       http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
+               called "hostkarma"
+               lists domains/URIs
+               lists IPs
+               usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
+               listing policy is documented
+               return codes are documented
+               seems very trustworthy
+       http://www.sorbs.net/
+               good reputation
+               lists domains/URIs
+               lists IPs
+               usage policy is clear that it’s free
+               listing policy is documented
+               return codes are documented
+               seems trustworthy
+       http://www.spamhaus.org/
+               good reputation
+               very well done
+               seems very professional
+               lists domains/URIs
+               lists IPs
+               usage policy is clear
+                       https://www.spamhaus.org/organization/dnsblusage/
+               listing policies are clearly documented
+               return codes are clearly documented
+       http://www.surbl.org/
+               good reputation
+               lists domains/URIs
+               usage policy is clear
+                       https://surbl.org/usage-policy
+               listing policy is documented
+               return codes are documented
+                       bitmasked
+                       127.0.0.1 means blocked
+       http://zapbl.net/
+               lists domains/URIs
+               lists IPs
+               listing policy seems clear
+                       https://zapbl.net/policy
+               usage policy seems clearly free for everyone
+                       https://zapbl.net/using
+               return codes are documented
+               seems well done
+       https://rbl.foobar.hu/
+               lists domains/URIs
+               lists IPs
+               listing policy seems clear
+               usage policy seems clearly free for everyone
+               return codes are documented
+               possibly unmaintained or dead
+                       footer says: ©2013-14
+       http://apews.org/?page=filter
+               questionable
+                       https://www.dnsbl.com/search/label/apews
+                       https://whatismyipaddress.com/apews
+               dead?
+                       no news on http://apews-user.blogspot.com/ since 2014
+               not further looked into because of the above
+       https://www.dnswl.org/
+               seems to be run with best intentions but has had issues from what I have heard from some users
+               IRC channel has some activity
+               usage policy relatively clear
+                       free within certain limits
+               listing policy
+                       self-service
+               return codes are documented
+       00_E_FOCUS
+               https://www.dnsblchile.org/index.en.html
+                       chilenian spam so not interesting for me
+                       seems alive
+       00_LISTS_BLOGSPAMMERS
+               https://www.madavi.de/madavibl/
+                       »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
+               http://bsb.empty.us/
+                       does not exist anymore
+                       empty.us returns »Nothing here, obviously.«
+       00_LISTS_COUNTRIES
+               korea
+                       http://korea.services.net/
+       00_LISTS_DIALUPS
+       00_LISTS_OPENRESOLVERS
+       00_LISTS_TORNODES
+               https://www.dan.me.uk/dnsbl
+       https://0spam.org/
+               clear information on usage policy
+                       Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
+                       DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
+               seems serious
+               listing policies are a little less clear
+                       bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
+                       nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
+                       url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
+               return codes not very clear
+       http://dnsbl.tornevall.org/
+               https://www.tornevall.net/
+               related to https://www.fraudbl.org/
+               seems a bit unstructured and not very well documented
+               seems active
+       http://dronebl.org/
+       http://mailspike.net/usage.html
+       http://psbl.org/
+               query zone: psbl.surriel.com
+       http://rbl.dns-servicios.com/rbl.php
+       http://rbl.schulte.org/
+       http://rbldata.interserver.net/
+               may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
+       http://relaytest.kundenserver.de/
+       http://rv-soft.info/
+       http://spamcannibal.org/dnsbl_check.shtml
+       http://spamrats.com/
+       http://spamstinks.com/
+       http://st.technovision.dk/
+       http://tor.efnet.org/
+               http://rbl.efnetrbl.org/ MIRROR
+       http://v4bl.org/
+       http://virbl.bit.nl/
+       http://wpbl.info/
+       http://www.aupads.org/
+       http://www.backscatterer.org/
+               fragwuerdige policy - bezahlen fuer schnelleres delisting
+       http://www.blockedservers.com/
+       http://www.blocklist.de/en/index.html
+       http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
+       http://www.gbudb.com/truncate/
+       http://www.justspam.org/
+       http://www.kempt.net/dnsbl/
+       http://www.leadmon.net/spamguard/
+       http://www.rbl.jp/allrbl-e.html
+       http://www.spamcop.net/
+               good policy
+               good reputation
+       http://www.spamsources.fabel.dk/
+               sensible policy
+       http://www.srntools.com/blacklist/
+       http://www.uceprotect.net/en/index.php
+       http://www.usenix.org.uk/content/rbl.html
+       http://zapbl.net/
+       https://bl.konstant.no/
+       https://choon.net/rbl.php
+       https://puck.nether.net/or/
+               might be good
+       https://rbl.foobar.hu/
+       https://www.abuse.ch/
+               https://www.abuse.ch/?tag=httpbl
+       https://www.kisarbl.or.kr/
+       https://www.megarbl.net/
+       https://www.team-cymru.org/Services/Bogons/dns.html
+       http://mailspike.net/usage.html
+               reputation-based
+       http://www.spamhauswhitelist.com/en/
+               policies for listing and usage on the website
+       http://www.whitelisted.org/
+               paid subscription
+               policy on site
+       https://puck.nether.net/or/
+               policies on website
+       https://rbl.foobar.hu/
+               usage and listing policies on website
+       http://www.isipp.com/email-accreditation/iadb-query-instruction/
+               requires signup
+       https://choon.net/rbl.php
+               not quite a usage policy, but seems ok
+               strange split of ipv4 and ipv6
+               seems dead?
+       https://www.dnswl.org/