X-Git-Url: https://git.netwichtig.de/gitweb/?a=blobdiff_plain;f=dnslists.otl;h=434848f56a181e2fafe652b873cd2c4c4983919c;hb=fb3cef4f2d7e89c464925f244879732630d5b32e;hp=a0608ce465347e1c4563cce41ec6726763ef06c3;hpb=a9910e122ef665ad7c6d7b0a1c1511e73cb6d995;p=user%2Fhenk%2Fdocs%2Fdnsbl_notes.git

diff --git a/dnslists.otl b/dnslists.otl
index a0608ce..434848f 100644
--- a/dnslists.otl
+++ b/dnslists.otl
@@ -8,13 +8,6 @@ TODO
 	implement in exim
 	implement in SA
 	implement in rspamd
-implement
-	https://abuse.ro/
-		policy
-			spamtraps
-			The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
-			Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
-			Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
 00_META
 	https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
 	http://www.blalert.com/dnsbls
@@ -194,6 +187,8 @@ implement
 			changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
 	http://dnsbl.burnt-tech.com/
 		domain is for sale
+	http://rbl.dns-servicios.com/rbl.php
+		website can not be found
 00_NEEDS_RECHECK
 	https://antispam.imp.ch/
 		no usage policy
@@ -214,6 +209,22 @@ implement
 	http://blacklist.woody.ch/rblcheck.php3
 		dead?
 		waiting for feedback
+	http://dnsbl.iip.lu/
+		https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
+			in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
+		https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
+			This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
+	http://dnsbl.inps.de/
+		timeout
+		https://www.dnsbl.com/search/label/dnsbl.inps.de
+			Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
+		https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
+			[May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
+		https://glockapps.com/blacklist/dnsbl-inps-de/
+			Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
+		https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
+			This blacklist is offline as of May 1, 2020.
+		https://web.archive.org/web/20220428013500/http://www.inps.de/
 00_NEEDS_RESEARCH
 	bl.tiopan.com
 	blocked.hilli.dk
@@ -290,6 +301,17 @@ implement
 			https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
 				»If you don’t create an account, you can still query the reputation of an IP address«
 			I don’t find any pricing or usage information
+		http://dnsbl.tornevall.org/
+			https://www.tornevall.net/
+			related to https://www.fraudbl.org/
+			seems a bit unstructured and not very well documented
+				I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
+			seems active
+		http://rbl.schulte.org/
+			seems active
+			listing policy seems to be: they received spam from an IP
+			usage policy: Anyone can use this RBL list [sic]
+			return codes: probably boolean, i.e. either listed or not
 	00_E_PAID
 	00_E_PRIVATE
 		88.blacklist.zap
@@ -449,17 +471,32 @@ implement
 			nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
 			url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
 		return codes not very clear
-	http://dnsbl.iip.lu/
-	http://dnsbl.inps.de/
-	http://dnsbl.tornevall.org/
+	https://abuse.ro/
+		policy
+			spamtraps
+			The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
+			Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
+			Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
 	http://dronebl.org/
-	http://mailspike.net/usage.html
+		usage policy is clear: free for whatever
+		listing policy is not quite so clear
+			can be mostly inferred from the classes but not entirely clear IMHO
+		has an IRC channel
+		return codes
+			not explicitly mentioned but it’s 127.0.0.X where X is the class from https://dronebl.org/classes
 	http://psbl.org/
 		query zone: psbl.surriel.com
-	http://rbl.dns-servicios.com/rbl.php
-	http://rbl.schulte.org/
+		no usage policy, but seems implied that usage is free
+		listing policy
+			no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
+		return codes
+			not documented, probably only boolean
 	http://rbldata.interserver.net/
-		may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
+		listing policy more or less clear
+		usage policy not given but since usage is explained it’s probably free for all
+		return codes seem to be binary, i.e. either listed or not
+		lists IPs
+		lists domains/URIs
 	http://relaytest.kundenserver.de/
 	http://rv-soft.info/
 	http://spamcannibal.org/dnsbl_check.shtml
@@ -481,7 +518,6 @@ implement
 	http://www.justspam.org/
 	http://www.kempt.net/dnsbl/
 	http://www.leadmon.net/spamguard/
-	http://www.rbl.jp/allrbl-e.html
 	http://www.spamcop.net/
 		good policy
 		good reputation
@@ -489,13 +525,8 @@ implement
 		sensible policy
 	http://www.srntools.com/blacklist/
 	http://www.uceprotect.net/en/index.php
-	http://www.usenix.org.uk/content/rbl.html
-	http://zapbl.net/
 	https://bl.konstant.no/
 	https://choon.net/rbl.php
-	https://puck.nether.net/or/
-		might be good
-	https://rbl.foobar.hu/
 	https://www.abuse.ch/
 		https://www.abuse.ch/?tag=httpbl
 	https://www.kisarbl.or.kr/
@@ -503,19 +534,13 @@ implement
 	https://www.team-cymru.org/Services/Bogons/dns.html
 	http://mailspike.net/usage.html
 		reputation-based
-	http://www.spamhauswhitelist.com/en/
-		policies for listing and usage on the website
 	http://www.whitelisted.org/
 		paid subscription
 		policy on site
 	https://puck.nether.net/or/
 		policies on website
-	https://rbl.foobar.hu/
-		usage and listing policies on website
 	http://www.isipp.com/email-accreditation/iadb-query-instruction/
 		requires signup
-	https://choon.net/rbl.php
 		not quite a usage policy, but seems ok
 		strange split of ipv4 and ipv6
 		seems dead?
-	https://www.dnswl.org/