]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/commitdiff
initial version
authorHendrik Jäger <gitcommit@henk.geekmail.org>
Thu, 25 May 2023 20:01:26 +0000 (22:01 +0200)
committerHendrik Jäger <gitcommit@henk.geekmail.org>
Thu, 25 May 2023 20:02:35 +0000 (22:02 +0200)
dnslists.otl [new file with mode: 0644]

diff --git a/dnslists.otl b/dnslists.otl
new file mode 100644 (file)
index 0000000..8c50487
--- /dev/null
@@ -0,0 +1,392 @@
+TODO
+       check and link (de)listing policy
+               NOGO: delisting for money
+       check and link usage policy
+       check and link return codes
+       find newsfeed or mailinglist
+       give feedback?
+       implement in exim
+       implement in SA
+       implement in rspamd
+implement
+       https://abuse.ro/
+               policy
+                       spamtraps
+                       The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
+                       Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
+                       Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
+00_META
+       https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
+       http://www.blalert.com/dnsbls
+       http://www.dnsbl.info/dnsbl-list.php
+       http://dnsbl.inps.de/index.cgi?lang=en&site=00002
+       http://www.sdsc.edu/~jeff/spam/cbc.html
+       http://moensted.dk/spam/
+       https://whatismyipaddress.com/blacklist-check
+       https://multirbl.valli.org/
+       https://glockapps.com/blacklist/
+       https://docs.hetrixtools.com/monitored-blacklists/
+       https://www.blacklistmaster.com/
+       https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
+00_ELANG
+       http://dnsbl.aspnet.hu/
+               hungarian?
+       http://spam-rbl.fr/
+               french
+       https://mav.com.br/
+               maybe? they have antispam but it’s all portugese? or spanish? no idea
+00_DEAD
+       http://openrbl.org/
+               as seems dead
+                       404s
+                       wiki is down
+       blitzed.org
+               dead since 2006
+                       https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
+                               referenced ML post is 404
+       blackholes.five-ten-sg.com
+               Offline as of 1/1/2013
+                       https://whatismyipaddress.com/five-ten-sg
+       dynip.rothen.com
+               On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
+                       https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
+       fl.chickenboner.biz
+               dead since 2011
+                       https://community.spiceworks.com/topic/329762-blacklist-removal
+                       https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
+               website contains spam/crap
+       http://cart00ney.surriel.com/
+               cart00ney.org is dead
+       http://dsbl.org/
+               points to surriel.com
+       http://csma.biz/
+               domain is for sale
+               dead since 2013
+                       https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
+       http://dnsbl.net.au/
+               website contains info about living in australia? called "AusBlog"
+               http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
+       http://moensted.dk/spam/
+               dead since 2010
+               https://moensted.dk/spam/
+       http://rbl.mw-internet.net/
+               domain was parked
+               2023: it is an asian(?) gambling(?) website
+       http://www.blackholes.us/
+               dead since 2009
+                       https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
+       http://www.deadbeef.com/
+               dead, no info
+       spamsources.dnsbl.info
+               dead since 2011 or so
+                       http://www.dnsbl.info/spamsources-dnsbl-defunct.php
+       http://www.gweep.ca/
+               domain dead, no other info
+       http://www.njabl.org/
+               dead since 2013
+                       https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
+       http://wytnij.to/
+               website parked, no other info
+       https://www.transip.nl/
+               dead since 2013
+                       https://www.blalert.com/dnsbl/proxy.block.transip.nl
+                       https://www.blalert.com/dnsbl/residential.block.transip.nl
+       pss.spambusters.org.ar
+               NXDOMAIN
+       rbl.snark.net
+               NXDOMAIN
+               https://snark.net/ gives access denied
+       whois.rfc-ignorant.org
+               NXDOMAIN
+               rfc-ignorant.org registered but no A/AAAA record
+               dead since 2012
+                       http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
+                       https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
+       will-spam-for-food.eu.org
+               unmaintained
+               dead
+                       https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
+       http://proxybl.org/
+               dead, seemingly written on http://proxybl.org/blog but that’s also dead
+               https://linuxreviews.org/Mail_Spam_Blacklists
+               https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
+       dev.null.dk
+               timeout, also on the parent null.dk
+               effectively dead
+       dnsbl.mags.net
+               seems dead, no info to be found
+               domain does not respond
+       http://msrbl.blogspot.ch/
+               http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
+               effectively dead
+       http://www.olsentech.net/
+               strange content on web
+               effectively dead
+       rbl.orbitrbl.com
+               http://www.orbitrbl.com/
+               timeout
+       rbl.polarcomm.net
+               NXDOMAIN
+               registered but no A/AAAA record
+       cidr.bl.mcafee.com
+               https://kc.mcafee.com/corporate/index?page=content&id=KB53783
+                       404
+               no info to be found
+               dead?
+       http://anti-spam.org.cn/?locale=en_US
+               unreachable DNS
+       rbl.talkactive.net
+               seems dead
+               talkactive.net redirects twice to some hosting company
+               last listings in 2017
+                       https://multirbl.valli.org/detail/rbl.talkactive.net.html
+                       https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
+       dnsbl.ipocalypse.net
+               no policies published
+               dead
+                       was a private list of an irc network
+                       network was renamed idlechat.net in 2014
+                       became a discord chat in 2022(?)
+00_NEEDS_RECHECK
+00_NEEDS_RESEARCH
+       bl.tiopan.com
+       blocked.hilli.dk
+       dialups.visi.com
+       dnsbl.antispam.or.id
+       dob.sibl.support-intelligence.net
+       intruders.docs.uu.se
+       map.spam-rbl.com
+       rbl.triumf.ca
+       all.s5h.net
+               http://www.usenix.org.uk/content/rbl.html
+       torexit.dan.me.uk
+       http://pedantic.org/
+               as of 20140701
+       rbl.fasthosts.co.uk
+               https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
+               seems dead?
+               https://antispam.fasthosts.co.uk/
+00_ALIVE
+       00_E_EVIL
+               sbl.nszones.com
+                       http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
+       00_E_INFORMATION
+               blacklist.sci.kun.nl
+                       https://cncz.science.ru.nl/en/howto/email-spam/
+                       not really its own DNSBL?
+                       no usage information
+                       no usage policy
+               http://anonmails.de/
+                       seems serious but missing necessary info
+                               usage policy
+                               listing policy
+               http://blacklist.jippg.org/
+                       no usage policy
+                       no listing policy
+                       no return code info
+               bip.virusfree.cz
+                       used by rspamd
+                       https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
+               https://www.nixspam.net/
+                       previously http://www.dnsbl.manitu.net/
+                       query zone: ix.dnsbl.manitu.net
+                       provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
+                       difficult to find info regarding listing policy
+                       asked for more information to be added
+                               https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
+               access.redhawk.org
+                       website works but barely any info, not even how to query it
+                       https://www.redhawk.org/?p=64
+                       https://www.redhawk.org/SpamHawk/index.php
+               https://senderscore.org/
+                       requires registration?
+                       Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
+                       https://senderscore.org/assess/blocklist-lookup/
+                       FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
+                       no information how to query found
+               mail-abuse.org
+                       https://ers.trendmicro.com/
+                       trendmicro paid service
+                       https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
+                               »If you don’t create an account, you can still query the reputation of an IP address«
+                       I don’t find any pricing or usage information
+       00_E_PAID
+       00_E_PRIVATE
+               88.blacklist.zap
+                       http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
+                       https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
+                       https://www.blalert.com/dnsbl/88.blacklist.zap
+                               88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
+               http://barracudacentral.org/rbl
+                       requires account
+               http://blakjak.net/RBL
+                       external access disabled
+               http://cyberlogic.net/
+               http://drmx.org/usage.php
+                       Use of any DrMX.ORG DNS Zone is by request and by contract only.
+               rbl.tdk.net
+                       private
+                       http://postmaster.tdc.dk/publish.php?id=31787
+               rbl.zenon.net
+                       private
+                       http://www.noc.zenon.net/rbl/
+               http://ahbl.org/node
+                       was public until 2015
+                       now private, invite-only
+       00_LISTS_DOMAINS
+               00_IN_USE_EXIM
+                       http://0spam.fusionzero.com/
+                       http://antispam.imp.ch/05-uribl.php?lng=0
+                       http://blacklist.woody.ch/rblcheck.php3
+                       http://mailhosts.org/
+                       http://rfc-clueless.org/
+                       http://spameatingmonkey.com/lists.html
+                       http://uribl.com/
+                       http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
+                       http://www.rbl.jp/allrbl-e.html
+                       http://www.sorbs.net/
+                               good reputation
+                               seems sensible
+                               different kinds of lists
+                       http://www.spamhaus.org/
+                               good reputation
+                               very well done
+                               different kinds of lists!
+                       http://www.surbl.org/
+                       http://zapbl.net/
+                       https://rbl.foobar.hu/
+               http://apews.org/?page=filter
+                       questionable
+       00_LISTS_DOMAINS_TRUSTED
+               00_IN_USE_EXIM
+                       http://mailhosts.org/rhswl/
+                       http://uribl.com/
+                       http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
+                       http://www.spamhauswhitelist.com/en/
+                       https://www.dnswl.org/
+       00_LISTS_IPS
+               00_E_FOCUS
+                       http://stopspam.org/rblcheck/index.php
+                               different kinds of lists
+                               none usable for me
+                       http://www.dnsblchile.org/
+                               chilenian spam
+               00_LISTS_BLOGSPAMMERS
+                       http://blogspambl.com/
+                       https://www.madavi.de/madavibl/
+                       http://bsb.empty.us/
+               00_LISTS_COUNTRIES
+                       http://countries.nerd.dk/
+                       korea
+                               http://korea.services.net/
+               00_LISTS_DIALUPS
+                       http://dul.ru/dul.en.html
+                               DEAD for sale
+               00_LISTS_OPENRESOLVERS
+                       http://dns.measurement-factory.com/surveys/openresolvers.html
+               00_LISTS_TORNODES
+                       http://www.sectoor.de/tor.php
+                       https://www.dan.me.uk/dnsbl
+               http://0spam.fusionzero.com/
+               http://anticaptcha.net/
+               http://antispam.imp.ch/03-wormlist.html?lng=0
+               http://antispam.imp.ch/04-spamlist.html?lng=0
+               http://antispam.imp.ch/06-dnsbl.php?lng=0
+               http://blacklist.lashback.com/
+                       http://ubl.unsubscore.com
+               http://blacklist.woody.ch/rblcheck.php3
+               http://cbl.abuseat.org/
+               http://dnsbl.burnt-tech.com/
+               http://dnsbl.iip.lu/
+               http://dnsbl.inps.de/
+               http://dnsbl.tornevall.org/
+               http://dronebl.org/
+               http://mailhosts.org/
+               http://mailhosts.org/ipbl/
+               http://mailspike.net/usage.html
+               http://psbl.org/
+                       query zone: psbl.surriel.com
+               http://rbl.dns-servicios.com/rbl.php
+               http://rbl.schulte.org/
+               http://rbldata.interserver.net/
+                       may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
+               http://relaytest.kundenserver.de/
+               http://rv-soft.info/
+               http://spamcannibal.org/dnsbl_check.shtml
+               http://spameatingmonkey.com/lists.html
+               http://spamrats.com/
+               http://spamstinks.com/
+               http://st.technovision.dk/
+               http://tor.efnet.org/
+                       http://rbl.efnetrbl.org/ MIRROR
+               http://v4bl.org/
+               http://virbl.bit.nl/
+               http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
+               http://wpbl.info/
+               http://www.aupads.org/
+               http://www.backscatterer.org/
+                       fragwuerdige policy - bezahlen fuer schnelleres delisting
+               http://www.blockedservers.com/
+               http://www.blocklist.de/en/index.html
+               http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
+               http://www.gbudb.com/truncate/
+               http://www.justspam.org/
+               http://www.kempt.net/dnsbl/
+               http://www.leadmon.net/spamguard/
+               http://www.rbl.jp/allrbl-e.html
+               http://www.sorbs.net/
+                       good reputation
+                       seems sensible
+                       different kinds of lists
+               http://www.spamcop.net/
+                       good policy
+                       good reputation
+               http://www.spamhaus.org/
+                       good reputation
+                       very well done
+                       different kinds of lists!
+               http://www.spamsources.fabel.dk/
+                       sensible policy
+               http://www.srntools.com/blacklist/
+               http://www.uceprotect.net/en/index.php
+               http://www.usenix.org.uk/content/rbl.html
+               http://zapbl.net/
+               https://bl.konstant.no/
+               https://choon.net/rbl.php
+               https://puck.nether.net/or/
+                       might be good
+               https://rbl.foobar.hu/
+               https://www.abuse.ch/
+                       https://www.abuse.ch/?tag=httpbl
+               https://www.kisarbl.or.kr/
+               https://www.megarbl.net/
+               https://www.team-cymru.org/Services/Bogons/dns.html
+       00_LISTS_IPS_TRUSTED
+               00_IN_USE_EXIM
+                       http://0spam.fusionzero.com/
+                               uses spamtraps
+                       http://mailhosts.org/ipwl/
+                               manual listing
+                       http://mailspike.net/usage.html
+                               reputation-based
+                       http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
+                               very nice project!
+                       http://www.spamhauswhitelist.com/en/
+                               policies for listing and usage on the website
+                       http://www.whitelisted.org/
+                               paid subscription
+                               policy on site
+                       https://puck.nether.net/or/
+                               policies on website
+                       https://rbl.foobar.hu/
+                               usage and listing policies on website
+               http://spameatingmonkey.com/lists.html
+                       whitelist zone not mentioned
+                       support request sent
+               http://www.isipp.com/email-accreditation/iadb-query-instruction/
+                       requires signup
+               https://choon.net/rbl.php
+                       not quite a usage policy, but seems ok
+                       strange split of ipv4 and ipv6
+                       seems dead?
+               https://www.dnswl.org/