X-Git-Url: https://git.netwichtig.de/gitweb/?a=blobdiff_plain;f=dnslists.otl;h=98ff3ebad1a880fe997e04bd7d18797d3e3cdb1a;hb=e376b04e4eb42e667b6d3673b6beb36794a83a11;hp=d3afe8ee1b86b85f1d84be2e2a6a47c2a7f84917;hpb=739f91f538c7c8f5aa5affa3e85b98bbb8577c7f;p=user%2Fhenk%2Fdocs%2Fdnsbl_notes.git diff --git a/dnslists.otl b/dnslists.otl index d3afe8e..98ff3eb 100644 --- a/dnslists.otl +++ b/dnslists.otl @@ -8,13 +8,6 @@ TODO implement in exim implement in SA implement in rspamd -implement - https://abuse.ro/ - policy - spamtraps - The last IP address before destination in the email headers is listed into rbl.abuse.ro list. - Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list - Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list 00_META https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614 http://www.blalert.com/dnsbls @@ -29,6 +22,7 @@ implement https://www.blacklistmaster.com/ https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists https://github.com/zbetcheckin/DNSBLs + https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists 00_ELANG http://dnsbl.aspnet.hu/ hungarian? @@ -164,6 +158,37 @@ implement As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet http://www.rbl.jp/allrbl-e.html website asks for login or just errors + http://www.spamhauswhitelist.com/en/ + looks like a parked domain with ads + http://stopspam.org/rblcheck/index.php + aka dul.pacifier.net + http://www.stopspam.org/rbl-info/ + stopped in 2013 + http://countries.nerd.dk/ + unable to connect, also for nerd.dk + http://dul.ru/dul.en.html + DEAD for sale + http://dns.measurement-factory.com/surveys/openresolvers.html + dead + »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down« + http://www.sectoor.de/tor.php + timeouts + http://anticaptcha.net/ + for sale + http://blacklist.lashback.com/ + query zone: ubl.unsubscore.com + provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist + rsync URLs seem dead, so does the download url + http://blacklist.woody.ch/ + no entries in the displayed "top 100" + may have been absorbed into the swinog blacklists, see antispam.imp.ch + http://cbl.abuseat.org/ + https://www.abuseat.org/ + changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure + http://dnsbl.burnt-tech.com/ + domain is for sale + http://rbl.dns-servicios.com/rbl.php + website can not be found 00_NEEDS_RECHECK https://antispam.imp.ch/ no usage policy @@ -184,6 +209,22 @@ implement http://blacklist.woody.ch/rblcheck.php3 dead? waiting for feedback + http://dnsbl.iip.lu/ + https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/ + in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead. + https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu + This blacklist is marked as "shut down" and non-operational as of 2017-12-31. + http://dnsbl.inps.de/ + timeout + https://www.dnsbl.com/search/label/dnsbl.inps.de + Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic. + https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/ + [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being. + https://glockapps.com/blacklist/dnsbl-inps-de/ + Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic. + https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de + This blacklist is offline as of May 1, 2020. + https://web.archive.org/web/20220428013500/http://www.inps.de/ 00_NEEDS_RESEARCH bl.tiopan.com blocked.hilli.dk @@ -260,6 +301,12 @@ implement https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx »If you don’t create an account, you can still query the reputation of an IP address« I don’t find any pricing or usage information + http://dnsbl.tornevall.org/ + https://www.tornevall.net/ + related to https://www.fraudbl.org/ + seems a bit unstructured and not very well documented + I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3 + seems active 00_E_PAID 00_E_PRIVATE 88.blacklist.zap @@ -294,6 +341,9 @@ implement return codes are explained http://rfc-clueless.org/ usage policy is not so clear but the FAQ implies that it’s just free to use for everyone + many timeouts + first noticed in 2014 and deactivated + retried in 2023 and still the case http://spameatingmonkey.com/ lists IPs that sent backscatter @@ -310,6 +360,8 @@ implement https://spameatingmonkey.com/services return codes documented https://spameatingmonkey.com/services + http://blogspambl.com/ + redirects to spameatingmonkey.com http://uribl.com/ lists domains/URIs that appear in spam bodies @@ -327,44 +379,82 @@ implement usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations listing policy is documented return codes are documented + seems very trustworthy http://www.sorbs.net/ good reputation - seems sensible - different kinds of lists + lists domains/URIs + lists IPs + usage policy is clear that it’s free + listing policy is documented + return codes are documented + seems trustworthy http://www.spamhaus.org/ good reputation very well done - different kinds of lists! + seems very professional + lists domains/URIs + lists IPs + usage policy is clear + https://www.spamhaus.org/organization/dnsblusage/ + listing policies are clearly documented + return codes are clearly documented http://www.surbl.org/ + good reputation + lists domains/URIs + usage policy is clear + https://surbl.org/usage-policy + listing policy is documented + return codes are documented + bitmasked + 127.0.0.1 means blocked http://zapbl.net/ + lists domains/URIs + lists IPs + listing policy seems clear + https://zapbl.net/policy + usage policy seems clearly free for everyone + https://zapbl.net/using + return codes are documented + seems well done https://rbl.foobar.hu/ + lists domains/URIs + lists IPs + listing policy seems clear + usage policy seems clearly free for everyone + return codes are documented + possibly unmaintained or dead + footer says: ©2013-14 http://apews.org/?page=filter questionable - http://uribl.com/ - http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists - http://www.spamhauswhitelist.com/en/ + https://www.dnsbl.com/search/label/apews + https://whatismyipaddress.com/apews + dead? + no news on http://apews-user.blogspot.com/ since 2014 + not further looked into because of the above https://www.dnswl.org/ + seems to be run with best intentions but has had issues from what I have heard from some users + IRC channel has some activity + usage policy relatively clear + free within certain limits + listing policy + self-service + return codes are documented 00_E_FOCUS - http://stopspam.org/rblcheck/index.php - different kinds of lists - none usable for me - http://www.dnsblchile.org/ - chilenian spam + https://www.dnsblchile.org/index.en.html + chilenian spam so not interesting for me + seems alive 00_LISTS_BLOGSPAMMERS - http://blogspambl.com/ https://www.madavi.de/madavibl/ + »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.« http://bsb.empty.us/ + does not exist anymore + empty.us returns »Nothing here, obviously.« 00_LISTS_COUNTRIES - http://countries.nerd.dk/ korea http://korea.services.net/ 00_LISTS_DIALUPS - http://dul.ru/dul.en.html - DEAD for sale 00_LISTS_OPENRESOLVERS - http://dns.measurement-factory.com/surveys/openresolvers.html 00_LISTS_TORNODES - http://www.sectoor.de/tor.php https://www.dan.me.uk/dnsbl https://0spam.org/ clear information on usage policy @@ -376,20 +466,26 @@ implement nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL. url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps. return codes not very clear - http://anticaptcha.net/ - http://blacklist.lashback.com/ - http://ubl.unsubscore.com - http://blacklist.woody.ch/rblcheck.php3 - http://cbl.abuseat.org/ - http://dnsbl.burnt-tech.com/ - http://dnsbl.iip.lu/ - http://dnsbl.inps.de/ - http://dnsbl.tornevall.org/ + https://abuse.ro/ + policy + spamtraps + The last IP address before destination in the email headers is listed into rbl.abuse.ro list. + Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list + Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list http://dronebl.org/ - http://mailspike.net/usage.html + usage policy is clear: free for whatever + listing policy is not quite so clear + can be mostly inferred from the classes but not entirely clear IMHO + has an IRC channel + return codes + not explicitly mentioned but it’s 127.0.0.X where X is the class from https://dronebl.org/classes http://psbl.org/ query zone: psbl.surriel.com - http://rbl.dns-servicios.com/rbl.php + no usage policy, but seems implied that usage is free + listing policy + no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism + return codes + not documented, probably only boolean http://rbl.schulte.org/ http://rbldata.interserver.net/ may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net @@ -403,7 +499,6 @@ implement http://rbl.efnetrbl.org/ MIRROR http://v4bl.org/ http://virbl.bit.nl/ - http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists http://wpbl.info/ http://www.aupads.org/ http://www.backscatterer.org/ @@ -415,29 +510,15 @@ implement http://www.justspam.org/ http://www.kempt.net/dnsbl/ http://www.leadmon.net/spamguard/ - http://www.rbl.jp/allrbl-e.html - http://www.sorbs.net/ - good reputation - seems sensible - different kinds of lists http://www.spamcop.net/ good policy good reputation - http://www.spamhaus.org/ - good reputation - very well done - different kinds of lists! http://www.spamsources.fabel.dk/ sensible policy http://www.srntools.com/blacklist/ http://www.uceprotect.net/en/index.php - http://www.usenix.org.uk/content/rbl.html - http://zapbl.net/ https://bl.konstant.no/ https://choon.net/rbl.php - https://puck.nether.net/or/ - might be good - https://rbl.foobar.hu/ https://www.abuse.ch/ https://www.abuse.ch/?tag=httpbl https://www.kisarbl.or.kr/ @@ -445,21 +526,13 @@ implement https://www.team-cymru.org/Services/Bogons/dns.html http://mailspike.net/usage.html reputation-based - http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists - very nice project! - http://www.spamhauswhitelist.com/en/ - policies for listing and usage on the website http://www.whitelisted.org/ paid subscription policy on site https://puck.nether.net/or/ policies on website - https://rbl.foobar.hu/ - usage and listing policies on website http://www.isipp.com/email-accreditation/iadb-query-instruction/ requires signup - https://choon.net/rbl.php not quite a usage policy, but seems ok strange split of ipv4 and ipv6 seems dead? - https://www.dnswl.org/