From 95be05eb6eeeabc355277f952aa3c38398cd8332 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Hendrik=20J=C3=A4ger?= Date: Thu, 25 May 2023 22:01:26 +0200 Subject: [PATCH 1/1] initial version --- dnslists.otl | 392 +++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 392 insertions(+) create mode 100644 dnslists.otl diff --git a/dnslists.otl b/dnslists.otl new file mode 100644 index 0000000..8c50487 --- /dev/null +++ b/dnslists.otl @@ -0,0 +1,392 @@ +TODO + check and link (de)listing policy + NOGO: delisting for money + check and link usage policy + check and link return codes + find newsfeed or mailinglist + give feedback? + implement in exim + implement in SA + implement in rspamd +implement + https://abuse.ro/ + policy + spamtraps + The last IP address before destination in the email headers is listed into rbl.abuse.ro list. + Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list + Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list +00_META + https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614 + http://www.blalert.com/dnsbls + http://www.dnsbl.info/dnsbl-list.php + http://dnsbl.inps.de/index.cgi?lang=en&site=00002 + http://www.sdsc.edu/~jeff/spam/cbc.html + http://moensted.dk/spam/ + https://whatismyipaddress.com/blacklist-check + https://multirbl.valli.org/ + https://glockapps.com/blacklist/ + https://docs.hetrixtools.com/monitored-blacklists/ + https://www.blacklistmaster.com/ + https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists +00_ELANG + http://dnsbl.aspnet.hu/ + hungarian? + http://spam-rbl.fr/ + french + https://mav.com.br/ + maybe? they have antispam but it’s all portugese? or spanish? no idea +00_DEAD + http://openrbl.org/ + as seems dead + 404s + wiki is down + blitzed.org + dead since 2006 + https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html + referenced ML post is 404 + blackholes.five-ten-sg.com + Offline as of 1/1/2013 + https://whatismyipaddress.com/five-ten-sg + dynip.rothen.com + On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet + https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com + fl.chickenboner.biz + dead since 2011 + https://community.spiceworks.com/topic/329762-blacklist-removal + https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614 + website contains spam/crap + http://cart00ney.surriel.com/ + cart00ney.org is dead + http://dsbl.org/ + points to surriel.com + http://csma.biz/ + domain is for sale + dead since 2013 + https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html + http://dnsbl.net.au/ + website contains info about living in australia? called "AusBlog" + http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html + http://moensted.dk/spam/ + dead since 2010 + https://moensted.dk/spam/ + http://rbl.mw-internet.net/ + domain was parked + 2023: it is an asian(?) gambling(?) website + http://www.blackholes.us/ + dead since 2009 + https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html + http://www.deadbeef.com/ + dead, no info + spamsources.dnsbl.info + dead since 2011 or so + http://www.dnsbl.info/spamsources-dnsbl-defunct.php + http://www.gweep.ca/ + domain dead, no other info + http://www.njabl.org/ + dead since 2013 + https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List + http://wytnij.to/ + website parked, no other info + https://www.transip.nl/ + dead since 2013 + https://www.blalert.com/dnsbl/proxy.block.transip.nl + https://www.blalert.com/dnsbl/residential.block.transip.nl + pss.spambusters.org.ar + NXDOMAIN + rbl.snark.net + NXDOMAIN + https://snark.net/ gives access denied + whois.rfc-ignorant.org + NXDOMAIN + rfc-ignorant.org registered but no A/AAAA record + dead since 2012 + http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html + https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html + will-spam-for-food.eu.org + unmaintained + dead + https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/ + http://proxybl.org/ + dead, seemingly written on http://proxybl.org/blog but that’s also dead + https://linuxreviews.org/Mail_Spam_Blacklists + https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline + dev.null.dk + timeout, also on the parent null.dk + effectively dead + dnsbl.mags.net + seems dead, no info to be found + domain does not respond + http://msrbl.blogspot.ch/ + http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated + effectively dead + http://www.olsentech.net/ + strange content on web + effectively dead + rbl.orbitrbl.com + http://www.orbitrbl.com/ + timeout + rbl.polarcomm.net + NXDOMAIN + registered but no A/AAAA record + cidr.bl.mcafee.com + https://kc.mcafee.com/corporate/index?page=content&id=KB53783 + 404 + no info to be found + dead? + http://anti-spam.org.cn/?locale=en_US + unreachable DNS + rbl.talkactive.net + seems dead + talkactive.net redirects twice to some hosting company + last listings in 2017 + https://multirbl.valli.org/detail/rbl.talkactive.net.html + https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net + dnsbl.ipocalypse.net + no policies published + dead + was a private list of an irc network + network was renamed idlechat.net in 2014 + became a discord chat in 2022(?) +00_NEEDS_RECHECK +00_NEEDS_RESEARCH + bl.tiopan.com + blocked.hilli.dk + dialups.visi.com + dnsbl.antispam.or.id + dob.sibl.support-intelligence.net + intruders.docs.uu.se + map.spam-rbl.com + rbl.triumf.ca + all.s5h.net + http://www.usenix.org.uk/content/rbl.html + torexit.dan.me.uk + http://pedantic.org/ + as of 20140701 + rbl.fasthosts.co.uk + https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl + seems dead? + https://antispam.fasthosts.co.uk/ +00_ALIVE + 00_E_EVIL + sbl.nszones.com + http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com + 00_E_INFORMATION + blacklist.sci.kun.nl + https://cncz.science.ru.nl/en/howto/email-spam/ + not really its own DNSBL? + no usage information + no usage policy + http://anonmails.de/ + seems serious but missing necessary info + usage policy + listing policy + http://blacklist.jippg.org/ + no usage policy + no listing policy + no return code info + bip.virusfree.cz + used by rspamd + https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information + https://www.nixspam.net/ + previously http://www.dnsbl.manitu.net/ + query zone: ix.dnsbl.manitu.net + provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines + difficult to find info regarding listing policy + asked for more information to be added + https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/ + access.redhawk.org + website works but barely any info, not even how to query it + https://www.redhawk.org/?p=64 + https://www.redhawk.org/SpamHawk/index.php + https://senderscore.org/ + requires registration? + Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html + https://senderscore.org/assess/blocklist-lookup/ + FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ- + no information how to query found + mail-abuse.org + https://ers.trendmicro.com/ + trendmicro paid service + https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx + »If you don’t create an account, you can still query the reputation of an IP address« + I don’t find any pricing or usage information + 00_E_PAID + 00_E_PRIVATE + 88.blacklist.zap + http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx + https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx + https://www.blalert.com/dnsbl/88.blacklist.zap + 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront + http://barracudacentral.org/rbl + requires account + http://blakjak.net/RBL + external access disabled + http://cyberlogic.net/ + http://drmx.org/usage.php + Use of any DrMX.ORG DNS Zone is by request and by contract only. + rbl.tdk.net + private + http://postmaster.tdc.dk/publish.php?id=31787 + rbl.zenon.net + private + http://www.noc.zenon.net/rbl/ + http://ahbl.org/node + was public until 2015 + now private, invite-only + 00_LISTS_DOMAINS + 00_IN_USE_EXIM + http://0spam.fusionzero.com/ + http://antispam.imp.ch/05-uribl.php?lng=0 + http://blacklist.woody.ch/rblcheck.php3 + http://mailhosts.org/ + http://rfc-clueless.org/ + http://spameatingmonkey.com/lists.html + http://uribl.com/ + http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists + http://www.rbl.jp/allrbl-e.html + http://www.sorbs.net/ + good reputation + seems sensible + different kinds of lists + http://www.spamhaus.org/ + good reputation + very well done + different kinds of lists! + http://www.surbl.org/ + http://zapbl.net/ + https://rbl.foobar.hu/ + http://apews.org/?page=filter + questionable + 00_LISTS_DOMAINS_TRUSTED + 00_IN_USE_EXIM + http://mailhosts.org/rhswl/ + http://uribl.com/ + http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists + http://www.spamhauswhitelist.com/en/ + https://www.dnswl.org/ + 00_LISTS_IPS + 00_E_FOCUS + http://stopspam.org/rblcheck/index.php + different kinds of lists + none usable for me + http://www.dnsblchile.org/ + chilenian spam + 00_LISTS_BLOGSPAMMERS + http://blogspambl.com/ + https://www.madavi.de/madavibl/ + http://bsb.empty.us/ + 00_LISTS_COUNTRIES + http://countries.nerd.dk/ + korea + http://korea.services.net/ + 00_LISTS_DIALUPS + http://dul.ru/dul.en.html + DEAD for sale + 00_LISTS_OPENRESOLVERS + http://dns.measurement-factory.com/surveys/openresolvers.html + 00_LISTS_TORNODES + http://www.sectoor.de/tor.php + https://www.dan.me.uk/dnsbl + http://0spam.fusionzero.com/ + http://anticaptcha.net/ + http://antispam.imp.ch/03-wormlist.html?lng=0 + http://antispam.imp.ch/04-spamlist.html?lng=0 + http://antispam.imp.ch/06-dnsbl.php?lng=0 + http://blacklist.lashback.com/ + http://ubl.unsubscore.com + http://blacklist.woody.ch/rblcheck.php3 + http://cbl.abuseat.org/ + http://dnsbl.burnt-tech.com/ + http://dnsbl.iip.lu/ + http://dnsbl.inps.de/ + http://dnsbl.tornevall.org/ + http://dronebl.org/ + http://mailhosts.org/ + http://mailhosts.org/ipbl/ + http://mailspike.net/usage.html + http://psbl.org/ + query zone: psbl.surriel.com + http://rbl.dns-servicios.com/rbl.php + http://rbl.schulte.org/ + http://rbldata.interserver.net/ + may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net + http://relaytest.kundenserver.de/ + http://rv-soft.info/ + http://spamcannibal.org/dnsbl_check.shtml + http://spameatingmonkey.com/lists.html + http://spamrats.com/ + http://spamstinks.com/ + http://st.technovision.dk/ + http://tor.efnet.org/ + http://rbl.efnetrbl.org/ MIRROR + http://v4bl.org/ + http://virbl.bit.nl/ + http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists + http://wpbl.info/ + http://www.aupads.org/ + http://www.backscatterer.org/ + fragwuerdige policy - bezahlen fuer schnelleres delisting + http://www.blockedservers.com/ + http://www.blocklist.de/en/index.html + http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng + http://www.gbudb.com/truncate/ + http://www.justspam.org/ + http://www.kempt.net/dnsbl/ + http://www.leadmon.net/spamguard/ + http://www.rbl.jp/allrbl-e.html + http://www.sorbs.net/ + good reputation + seems sensible + different kinds of lists + http://www.spamcop.net/ + good policy + good reputation + http://www.spamhaus.org/ + good reputation + very well done + different kinds of lists! + http://www.spamsources.fabel.dk/ + sensible policy + http://www.srntools.com/blacklist/ + http://www.uceprotect.net/en/index.php + http://www.usenix.org.uk/content/rbl.html + http://zapbl.net/ + https://bl.konstant.no/ + https://choon.net/rbl.php + https://puck.nether.net/or/ + might be good + https://rbl.foobar.hu/ + https://www.abuse.ch/ + https://www.abuse.ch/?tag=httpbl + https://www.kisarbl.or.kr/ + https://www.megarbl.net/ + https://www.team-cymru.org/Services/Bogons/dns.html + 00_LISTS_IPS_TRUSTED + 00_IN_USE_EXIM + http://0spam.fusionzero.com/ + uses spamtraps + http://mailhosts.org/ipwl/ + manual listing + http://mailspike.net/usage.html + reputation-based + http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists + very nice project! + http://www.spamhauswhitelist.com/en/ + policies for listing and usage on the website + http://www.whitelisted.org/ + paid subscription + policy on site + https://puck.nether.net/or/ + policies on website + https://rbl.foobar.hu/ + usage and listing policies on website + http://spameatingmonkey.com/lists.html + whitelist zone not mentioned + support request sent + http://www.isipp.com/email-accreditation/iadb-query-instruction/ + requires signup + https://choon.net/rbl.php + not quite a usage policy, but seems ok + strange split of ipv4 and ipv6 + seems dead? + https://www.dnswl.org/ -- 2.39.2