X-Git-Url: https://git.netwichtig.de/gitweb/?a=blobdiff_plain;f=dnslists.otl;h=6e5877643cd6db5cb4bf78e35cf73b433a926036;hb=4c6044b8e7261f564be93f8360692bd04449407e;hp=f79868390f2d2eefbada36db041d790d8e48ffd0;hpb=bf50682219580a32b855cdb7a2e7262ad0f1ec56;p=user%2Fhenk%2Fdocs%2Fdnsbl_notes.git

diff --git a/dnslists.otl b/dnslists.otl
index f798683..6e58776 100644
--- a/dnslists.otl
+++ b/dnslists.otl
@@ -23,6 +23,7 @@ TODO
 	https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
 	https://github.com/zbetcheckin/DNSBLs
 	https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
+	https://www.impressionwise.com/kb/threats/rbl-advisories.html
 00_ELANG
 	http://dnsbl.aspnet.hu/
 		hungarian?
@@ -187,6 +188,19 @@ TODO
 			changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
 	http://dnsbl.burnt-tech.com/
 		domain is for sale
+	http://rbl.dns-servicios.com/rbl.php
+		website can not be found
+	http://spamcannibal.org/
+		dead, as of at least 2018
+	http://st.technovision.dk/
+		https://docs.hetrixtools.com/st-technovision-dk-inactive-removed/
+			[December 8, 2021] This RBL has stopped responding to DNS queries.
+	http://spamstinks.com/
+		cert is for generic hostname
+		website shows some login form
+	http://virbl.bit.nl/
+		https://www.rollernet.us/2017/01/shutdown-of-virbl-dnsbl-bit-nl/
+			January 23, 2017: »The Virbl-project site has been replaced by this static message to inform those that find their ways here. The Virbl DNSBL-zone was emptied and will be removed all together at a moment further on in the future.«
 00_NEEDS_RECHECK
 	https://antispam.imp.ch/
 		no usage policy
@@ -299,6 +313,23 @@ TODO
 			https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
 				»If you don’t create an account, you can still query the reputation of an IP address«
 			I don’t find any pricing or usage information
+		http://dnsbl.tornevall.org/
+			https://www.tornevall.net/
+			related to https://www.fraudbl.org/
+			seems a bit unstructured and not very well documented
+				I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
+			seems active
+		http://rbl.schulte.org/
+			seems active
+			listing policy seems to be: they received spam from an IP
+			usage policy: Anyone can use this RBL list [sic]
+			return codes: probably boolean, i.e. either listed or not
+		http://relaytest.kundenserver.de/
+			by 1und1 (now ionos?), used internally
+			https://www.blalert.com/dnsbl/relays.bl.kundenserver.de
+			no usage policy found
+			no listing policy found
+			no return code explanation found
 	00_E_PAID
 	00_E_PRIVATE
 		88.blacklist.zap
@@ -448,6 +479,10 @@ TODO
 	00_LISTS_OPENRESOLVERS
 	00_LISTS_TORNODES
 		https://www.dan.me.uk/dnsbl
+		http://rbl.efnetrbl.org/
+			aka http://tor.efnet.org/
+			lists IPs
+			lists open proxies, infected machines, tornodes, etc.
 	https://0spam.org/
 		clear information on usage policy
 			Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
@@ -458,11 +493,6 @@ TODO
 			nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
 			url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
 		return codes not very clear
-	http://dnsbl.tornevall.org/
-		https://www.tornevall.net/
-		related to https://www.fraudbl.org/
-		seems a bit unstructured and not very well documented
-		seems active
 	https://abuse.ro/
 		policy
 			spamtraps
@@ -470,23 +500,38 @@ TODO
 			Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
 			Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
 	http://dronebl.org/
-	http://mailspike.net/usage.html
+		usage policy is clear: free for whatever
+		listing policy is not quite so clear
+			can be mostly inferred from the classes but not entirely clear IMHO
+		has an IRC channel
+		return codes
+			not explicitly mentioned but it’s 127.0.0.X where X is the class from https://dronebl.org/classes
 	http://psbl.org/
 		query zone: psbl.surriel.com
-	http://rbl.dns-servicios.com/rbl.php
-	http://rbl.schulte.org/
+		no usage policy, but seems implied that usage is free
+		listing policy
+			no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
+		return codes
+			not documented, probably only boolean
 	http://rbldata.interserver.net/
-		may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
-	http://relaytest.kundenserver.de/
+		listing policy more or less clear
+		usage policy not given but since usage is explained it’s probably free for all
+		return codes seem to be binary, i.e. either listed or not
+		lists IPs
+		lists domains/URIs
 	http://rv-soft.info/
-	http://spamcannibal.org/dnsbl_check.shtml
+		usage policy not explicit but seems to be free
+		listing policy also not explicit but can be inferred from return code explanation
+		return codes are explained
 	http://spamrats.com/
-	http://spamstinks.com/
-	http://st.technovision.dk/
-	http://tor.efnet.org/
-		http://rbl.efnetrbl.org/ MIRROR
+		clear usage policy (ToS)
+		listing policies documented
+		return codes of aggregated list documented
+		lists IPs
 	http://v4bl.org/
-	http://virbl.bit.nl/
+		usage policy documented
+		listing policy not really clear
+		return codes documented
 	http://wpbl.info/
 	http://www.aupads.org/
 	http://www.backscatterer.org/
@@ -498,7 +543,6 @@ TODO
 	http://www.justspam.org/
 	http://www.kempt.net/dnsbl/
 	http://www.leadmon.net/spamguard/
-	http://www.rbl.jp/allrbl-e.html
 	http://www.spamcop.net/
 		good policy
 		good reputation
@@ -506,13 +550,8 @@ TODO
 		sensible policy
 	http://www.srntools.com/blacklist/
 	http://www.uceprotect.net/en/index.php
-	http://www.usenix.org.uk/content/rbl.html
-	http://zapbl.net/
 	https://bl.konstant.no/
 	https://choon.net/rbl.php
-	https://puck.nether.net/or/
-		might be good
-	https://rbl.foobar.hu/
 	https://www.abuse.ch/
 		https://www.abuse.ch/?tag=httpbl
 	https://www.kisarbl.or.kr/
@@ -520,19 +559,13 @@ TODO
 	https://www.team-cymru.org/Services/Bogons/dns.html
 	http://mailspike.net/usage.html
 		reputation-based
-	http://www.spamhauswhitelist.com/en/
-		policies for listing and usage on the website
 	http://www.whitelisted.org/
 		paid subscription
 		policy on site
 	https://puck.nether.net/or/
 		policies on website
-	https://rbl.foobar.hu/
-		usage and listing policies on website
 	http://www.isipp.com/email-accreditation/iadb-query-instruction/
 		requires signup
-	https://choon.net/rbl.php
 		not quite a usage policy, but seems ok
 		strange split of ipv4 and ipv6
 		seems dead?
-	https://www.dnswl.org/