DNS Blackhole Lists or DNSBLs are a way to filter spam by using Domain Name Service (DNS) records as a database of policies relating to either an IP address or domain name, which can be used to decide whether or not to accept (or label) email. Don't use any of these without testing them first and reading any available listing policy. Test the DNSBLs you use regularly. If a DNSBL suddenly dies or starts to return positive results for all queries, will all of your incoming email be rejected?
The “Copy” tags in the table indictate if it is possible to use one of the following methods to take a copy of the DNS zone: A: Zone Transfer, R: RSYNC, H: HTTP, B: BGP. Links to check the lists (Chk), remove entries (Rem), add entries (Add) and to find the listing policy (Pol) are available for most lists.
Major Spam Source DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
sbl.spamhaus.org | SBL | 127.0.0.2 | Chk | Rem | Add | Pol | Spamhaus Block List | |
zen.spamhaus.org | SBL-ZEN | various | Chk | Rem | Add | Pol | Spamhaus Block List - the SBL, XBL and PBL in combination | |
*.dnsbl.karmasphere.com | KARMA | various | Chk | N/A | N/A | Pol | Karmasphere is like Santa Claus: it knows if you've been naughty, and it knows if you've been nice | |
dnsbl.ahbl.org | AHBL | various | Chk | Rem | Add | Pol | Abusive Hosts Blocking List | |
dnsbl.njabl.org | NJABL | various | R | Chk | Rem | Add | Pol | Not Just Another Bogus List |
dnsbl.sorbs.net | SORBS | various | Chk | Rem | Add | Pol | ||
blackholes.five-ten-sg.com | FIVE-TEN | various | Chk | Rem | Add | Pol | ||
hostkarma.junkemailfilter.com | HOSTKARMA | various | Chk | Rem | Add | Pol | ||
aspews.ext.sorbs.net | ASPEWS | 127.0.0.2 | H | Chk | Rem | Add | Pol | Another Spam Prevention Early Warning System |
iscbl.anti-spam.org.cn | CASA-CBL | various | Chk | Rem | Add | Pol | China Anti-Spam Alliance Black List | |
cbl.anti-spam.org.cn | ||||||||
cblplus.anti-spam.org.cn | ||||||||
cblless.anti-spam.org.cn | ||||||||
Paid Subscription DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
rbl-plus.mail-abuse.org | MAPS-RBL+ | 127.0.0.2 | Chk | Rem | Add | Pol | Nomination of spam sources | |
- | ivmSIP and ivmSIP/24 | - | R | Chk | Rem | Add | Pol | Very good at catching low-flying spammers - only available by rsync. imvSIP/24 lists ranges used by spammers, not just single IPs. |
varies | MAILDEF | 127.0.0.2 | Chk | Rem | Add | Pol | Custom DNSBLs | |
bl.redhatgate.com | POSTFIXGATE | 127.0.0.1 | Chk | Rem | Add | Pol | IPs that send spam to Spam Catcher e-mail Addresses | |
c10.rbl.hk | MAILPROVE | 127.0.0.2 | Chk | Rem | Add | Pol | Asia-based spam source DNSBL | |
- | MIPSPACE | 127.0.0.2 | Chk | Rem | Add | Pol | IP Addresses associated with known commercial marketing companies | |
- | ATLBL | 127.0.0.2 | Chk | Rem | Add | Pol | Designed to combat many different types of Internet abuse | |
User Submission DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
bl.spamcop.net | SPAMCOP | 127.0.0.2 | Chk | Rem | Add | Pol | Experimental list, not for use in a production environment | |
varies | DRBL-AGK DRBL-CROCO DRBL-BIZEXPERT |
127.0.0.2 | Chk | Rem | Add | Pol | Distributed Realtime Blackhole List | |
bl.emailbasura.org | EMAILBASURA | 127.0.0.2 | Chk | Rem | Add | Pol | Spanish Language DNSBL. Spam is reported via the website and checked against a white-list. | |
Spamtrap Driven or Automated DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
db.wpbl.info | WPBL | 127.0.0.2 | R | Chk | Rem | Add | Pol | Weighted Private Block List. WPBL should not be used to block mail or deny SMTP connections. It is most effective in a scoring-based system rather than black-and-white filtering. |
msgid.bl.gweep.ca | GWEEP-MSGID | 127.0.0.2 | Chk | Rem | Add | Pol | IPs that sent email to bad Addresses in the last two and a half hours. | |
sbbl.they.com | SSBL | 127.0.0.2 | Chk | Rem | Add | Pol | Spamtraps on they.com | |
dnsbl.kempt.net | KEMPT | 127.0.0.2 | Chk | Auto | Add | Pol | Contact Kempt if you use this list | |
blacklist.woody.ch | WOODY | 127.0.0.2 | Chk | Rem | Add | Pol | ||
psbl.surriel.com | SURRIEL-PSBL | 127.0.0.2 | R | Chk | Rem | Add | Pol | Passive Spam Block List |
dnsbl-1.uceprotect.net | UCEPROTECT | 127.0.0.2 | R H | Chk | Rem | Add | Pol | |
dnsbl-2.uceprotect.net | ||||||||
dnsbl-3.uceprotect.net | ||||||||
virbl.bit.nl | VIRBL | 127.0.0.2 | H | Chk | Rem | Add | Pol | Virus or Worm Sources |
rot.blackhole.cantv.net | CANTV-ROT | 127.0.0.2 | Chk | Auto | Add | Pol | Virus or Worm Sources | |
virus.rbl.jp | RBL.JP-VIRUS | 127.0.0.2 | Chk | Rem | Add | Pol | Virus or Worm Sources | |
ix.dnsbl.manitu.net | NIXSPAM | 127.0.0.2 | H | Chk | Rem | Add | Pol | automatically generated entries |
wormrbl.imp.ch | IMP-WORMS | 127.0.0.4 | H | Chk | Rem | Add | Pol | Worms from the last 2 days |
spamrbl.imp.ch | IMP-SPAM | 127.0.0.5 | Chk | Rem | Add | Pol | Spam from the last 2 days | |
virus.rbl.msrbl.net | MSRBL-VIRUS | 127.0.0.2 | Chk | Rem | Add | Pol | Hosts found sending virus mails | |
phishing.rbl.msrbl.net | MSRBL-PHISH | 127.0.0.2 | Chk | Rem | Add | Pol | Hosts found sending phishing mails | |
images.rbl.msrbl.net | MSRBL-IMAGES | 127.0.0.2 | Chk | Rem | Add | Pol | Hosts found sending mail contaning spam images | |
spam.rbl.msrbl.net | MSRBL-SPAM | 127.0.0.2 | Chk | Rem | Add | Pol | Hosts found sending mail contaning spam | |
combined.rbl.msrbl.net | MSRBL-COMBINED | 127.0.0.2 | Chk | Rem | Add | Pol | All the above lists combined | |
rbl.interserver.net | INTERSERVER | 127.0.0.2 | Chk | Rem | Add | Pol | Checks multiple spam traps and blocks the IPs of the sender to those email addresses. | |
spamlist.or.kr | KISARBL | 127.0.0.2 | Chk | Rem | Add | Pol | Real time spam IP block list by Korean Information Security Agency | |
dyna.spamrats.com | RATS | 127.0.0.2 | Chk | Rem | Add | Pol | Infected PC or BotNet sending spam | |
noptr.spamrats.com | ||||||||
spam.spamrats.com | ||||||||
dnsbl.abuse.ch | ABUSE-CH | 127.0.0.2 | Chk | Rem | Add | Pol | IP addresses that have sent spam to a honeypot. Use combined.abuse.ch to also include drone.abuse.ch - see below. | |
combined.abuse.ch | ||||||||
dnsbl.inps.de | INPS | 127.0.0.2 | Chk | Rem | Add | Pol | If an e-mail is detected as spam and the IP address of the sending host meets some additional requirements | |
- | BRBL | unknown | Chk | Rem | Add | Pol | Barracuda Reputation Block List - ask for access via the website | |
dnsbl.dronebl.org | DRONEBL | 127.0.0.2 | Chk | Rem | Add | Pol | DroneBL is a realtime monitor of abusable IPs, which has the goal of stopping abuse of infected machines. | |
Behaviour Driven DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
bl.deadbeef.com | DEADBEEF | 127.0.0.2 | Chk | Rem | Add | Pol | ISPs who do not accept abuse reports | |
forbidden.icm.edu.pl | ICM.EDU.PL | 127.0.0.2 | Chk | Rem | Add | Pol | Companies which took ORBS administrator to court | |
query.senderbase.org | SENDERBASE | TXT | Chk | Rem | Add | Pol | Returns TXT records | |
ubl.lashback.com ubl.unsubscore.com |
LASHBACK | 127.0.0.2 | A H H | Chk | Rem | Add | Pol | Unsubscribe abusers |
test.blocklist.org | PHOENIX | 127.0.0.2 | Chk | Rem | Add | Pol | p2p blocklist (includes spam listings) | |
ips.backscatterer.org | BACKSCATTER | 127.0.0.2 | Chk | Rem | N/A | Pol | Backscatter and Sender Callout abusers | |
backscatter.spameatingmonkey.net | SEM-BACKSCATTER | 127.0.0.2 | Chk | N/A | N/A | Pol | IPs that mailed a spamtrap with a NULL sender. IPs automatically expire after 15 days' inactivity. | |
list.anonwhois.net | ANONWHOIS | various | R | Chk | N/A | N/A | Pol | A list of domains that are using a private or anonymous whois service. This is an informational list, not a blacklist. |
URIBLs and Content Based DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
multi.surbl.org |
SURBL | 127.0.0.2 | R H | Chk | Rem | Add | Pol | Spam URI Realtime Blocklist. Lists domains seen in URLs in spam messages reported to various sources, to be used to block based on URL. |
ab.surbl.org | ||||||||
ob.surbl.org | ||||||||
sc.surbl.org | ||||||||
ws.surbl.org | ||||||||
ph.surbl.org | ||||||||
dnsbl.othello.ch | MOD-DNSBL | various | A | Chk | Rem | Add | Pol | Full URL list, for use with web filtering |
uribl.swinog.ch | IMP-URIBL | 127.0.0.2 | Chk | Rem | Add | Pol | SWINOG URIBL | |
bsb.spamlookup.net | SPAMLOOKUP | 127.0.0.2 | Chk | Rem | Add | Pol | Domains seen in blog spam | |
dob.sibl.support-intelligence.net | DOB | 127.0.0.2 | Chk | Rem | Add | Pol | The Day Old Bread List - domains registered in the last five days | |
url.rbl.jp | RBL.JP-URL | 127.0.0.2 | Chk | Rem | Add | Pol | Check URLs in e-mail against spam URLs | |
dyndns.rbl.jp | RBL.JP-DYN | 127.0.0.2 | Chk | Rem | Add | Pol | Check URLs in e-mail against free dynamic DNS services | |
- | ivmURI | - | R | Chk | Rem | Add | Pol | Similar to SURBL and URIBL - access by subscription |
dbl.spamhaus.org | DBL | various | Chk | Rem | N/A | Pol | Spam domains including spam payload URLs, spam sources and senders ("right-hand side"), known spammers and spam gangs, and phish, virus and malware-related sites. | |
uribl.spameatingmonkey.net | SEM-URI | 127.0.0.2 | Chk | Rem | Add | Pol | URIs found a requisite number of times in unwanted messages. Domains automatically expire after 15 days of inactivity | |
ixhash.spameatingmonkey.net | SEM-IXHASH | - | Chk | Rem | Add | Pol | Mail from our spamtraps or reported by users is analyzed and the iXhash for the message is contained in this zone. SpamAssassin has a plugin that fully supports iXhash | |
Bogon, Hijacked & Zombie Network DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
bogons.cymru.com | CYMRU-BOGON | 127.0.0.2 | A H B | Chk | Rem | Add | Pol | Bogon IP allocations |
zombie.dnsbl.sorbs.net | SORBS-ZOMBIES | 127.0.0.2 | Chk | Rem | Add | Pol | List of networks hijacked from their original owners | |
Open Relay DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
relays.mail-abuse.org | MAPS-RSS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
orvedb.aupads.org | ORVEDB | 127.0.0.2 | Chk | Auto | Add | Pol | ||
relays.nether.net | NETHER-OR | 127.0.0.2 | Chk | Rem | Add | Pol | ||
unsure.nether.net | ||||||||
relays.bl.gweep.ca | GWEEP-RELAYS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
smtp.dnsbl.sorbs.net | SORBS-RELAYS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
relays.bl.kundenserver.de | KUNDEN | 127.0.0.2 | Chk | Rem | Add | Pol | ||
Open Proxy DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
xbl.spamhaus.org | SPAMHAUS-XBL | 127.0.0.4-6 | Chk | N/A | Add | Pol | Exploits Block List - illegal 3rd party exploits. Incorporates CBL data and OPM data. |
|
cbl.abuseat.org | CBL | 127.0.0.2 | R | Chk | Rem | Add | Pol | Data is used by XBL, so don't use both. |
drone.abuse.ch | ABUSE-CH | 127.0.0.2 | Chk | Rem | Add | Pol | IP addresses that are part of a spam- or malware-related fast-flux botnet | |
proxy.bl.gweep.ca | GWEEP-PROXY | 127.0.0.2 | Chk | Rem | Add | Pol | ||
- | MAPS-OPS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
http.dnsbl.sorbs.net | SORBS-HTTP | 127.0.0.2 | Chk | Rem | Add | Pol | ||
socks.dnsbl.sorbs.net | SORBS-SOCKS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
misc.dnsbl.sorbs.net | SORBS-PROXY | 127.0.0.2 | Chk | Rem | Add | Pol | ||
proxy.block.transip.nl | TRANSIP-PROXY | 127.0.0.2 | Chk | Rem | Add | Pol | ||
Open Formmail DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
web.dnsbl.sorbs.net | SORBS-WEB | 127.0.0.2 | Chk | Rem | Add | Pol | ||
Unconfirmed Mailing Lists |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
nml.mail-abuse.org | MAPS-NML | 127.0.0.2 | Chk | Rem | Add | Pol | ||
Dialup or Dynamic IP DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
pbl.spamhaus.org | PBL | tba | Chk | Rem | Add | Pol | Spamhaus Policy Block List | |
dialups.mail-abuse.org | MAPS-DUL | 127.0.0.3 | Chk | Rem | Add | Pol | ||
dul.ru | DUL.RU | 127.0.0.2 | A | Chk | Rem | Add | Pol | |
duinv.aupads.org | AUPADS-DUINV | 127.0.0.2 | Chk | Rem | Add | Pol | ||
pool.dnsbl.solid.net | SOLID-POOL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
dynablock.sorbs.net | SORBS-DYNA | 127.0.0.2 | Chk | Rem | Add | Pol | ||
dul.dnsbl.sorbs.net | ||||||||
residential.block.transip.nl | TRANSIP-RES | 127.0.0.2 | Chk | Rem | Add | Pol | ||
dynip.rothen.com | DYNIP | 127.0.0.2 | Chk | Rem | Add | Pol | ||
dul.blackhole.cantv.net | CANTV DUL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
cdl.anti-spam.org.cn | CDL | 127.0.8.4 | Chk | Rem | Add | Pol | Dynamic addresses in China (including Taiwan) | |
short.rbl.jp | RBL.JP-SHORT | 127.0.0.2 | Chk | Rem | Add | Pol | ADSL or PPP connections | |
Focused DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
<country code>.rbl.cluecentral.net | CLUECENTRAL | 127.0.0.2 | Chk | N/A | Add | Pol | Block or whitelist countries and/or netblocks based on origin AS number | |
<AS number>.rbl.cluecentral.net | ||||||||
*.cc.countries.nerd.dk | NERD-COUNTRIES | 127.0.0.2 | Chk | N/A | Add | Pol | Lists IP space by ccTLD - uses ISO country codes. Website down as of 09/2005 | |
*.ascc.dnsbl.bit.nl | ASCC | various | Chk | N/A | Add | Pol | Countrycode and BGP Autonomous System | |
geobl.spamanalysis.org | GEOBL | 127.0.0.2 | Chk | N/A | Add | Pol | Deny or allow hosts known to be within certain geographic locations | |
bl.scrollout.com | iRBL | various | Chk | N/A | Add | Pol | UNREGISTERED USERS can block only countries by configuring the email server(s) to use bl.scrollout.com and block manually each country they don't (want to) deal with depending on the Return Code | |
country.netop.org | NETOP | TXT records | Chk | N/A | Add | Pol | two-letter ISO 3166 country code | |
korea.services.net | KOREA | 127.0.0.2 | Chk | N/A | Add | Pol | South Korean IP space | |
fl.chickenboner.biz | CHICKENBONER | 127.0.0.2 | Chk | N/A | Add | Pol | Florida Blackhole List | |
flowgoaway.com | FLOWGO-AWAY | 127.0.0.2 | Chk | N/A | Add | Pol | Flowgo Blacklist, published by Intersil | |
tor.dnsbl.sectoor.de | TOR-SECTOOR | 127.0.0.2 | Chk | N/A | N/A | Pol | Blacklist for Tor servers. torserver.tor.dnsbl.sectoor.de also lists /24 (“Class C”) networks around Tor exit nodes. | |
torserver.tor.dnsbl.sectoor.de | ||||||||
<port>.<yourreverseip>.ip-port.exitlist.torproject.org | TORDNSEL | 127.0.0.2 | Chk | Rem | Add | Pol | Checks Tor exit nodes that can connect to the IP and port that make up the zone |
|
<country code>.country.spameatingmonkey.net | SEM-COUNTRY | 127.0.0.2 | Chk | Rem | Add | Pol | ||
geobl.spameatingmonkey.net | SEM-GEOBL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
Local and Personal DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
mail.people.it | PEOPLE.IT | 127.0.0.2 | Chk | Rem | Add | Pol | Local bl at people.it | |
blocked.hilli.dk | HILLI | 127.0.0.2 | Chk | Rem | Add | Pol | Local bl at hilli.dk | |
dnsbl.cyberlogic.net | CYBERLOGIC | 127.0.0.2 | Chk | Rem | Add | Pol | “...used to prevent reoccuring spam sent to Cyberlogic. Nominations come from our clients...” | |
rsbl.aupads.org | RSBL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
blacklist.sci.kun.nl | SCI.KUN.NL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
dnsbl.isoc.bg | ISOC | 127.0.0.2 | Chk | Rem | Add | Pol | Mostly Bulgarian spammers | |
all.spamblock.unit.liu.se | SPAMBLOCK | 127.0.0.2 | Chk | Rem | Add | Pol | ||
bl.csma.biz | MCFAEN | 127.0.0.2 | Chk | Rem | Add | Pol | McFadden Associates free spam blacklist | |
sbl.csma.biz | ||||||||
dnsbl.solid.net | SOLID | 127.0.0.2 | Chk | Rem | Add | Pol | ||
map.spam-rbl.com | SPAM-RBL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
fresh.sa_slip.rbl.arix.com | ARIX-SLIP | 127.0.0.2 | Chk | Rem | Add | Pol | Spammers that get round SpamAssassin | |
stale.sa_slip.arix.com | ||||||||
fresh.dict.rbl.arix.com | ARIX-DICT | 127.0.0.2 | Chk | Rem | Add | Pol | Dictionary Spammers | |
stale.dict.rbl.arix.com | ||||||||
access.redhawk.org | REDHAWK | 127.0.0.2 | Chk | Rem | Add | Pol | ||
blackholes.alphanet.ch | ALPHANET | 127.0.0.2 | Chk | Rem | Add | Pol | ||
spam.wytnij.to | WYTNIJ | 127.0.0.2 | Chk | Rem | Add | Pol | ||
3y.spam.mrs.kithrup.com | KITHRUP | 0.0.0.0 | Chk | Rem | Add | Pol | ||
mail-abuse.blacklist.jippg.org | JIPPG | 127.0.0.2 | Chk | Rem | Add | Pol | ||
spamguard.leadmon.net | LEADMON | various | Chk | Rem | Add | Pol | Dead? | |
dnsbl.jammconsulting.com | JAMM | various | Chk | Rem | Add | Pol | Dead? | |
rbl.snark.net | SNARK | various | Chk | Rem | Add | Pol | ||
dnsbl.mags.net | MAGS | 127.0.0.2 | Chk | Rem | Add | Pol | See this post | |
- | PUAS | 127.0.0.2 | Chk | Rem | Add | Pol | Private DNSBL of Spanish Universities | |
spamsource.block.transip.nl | TRANSIP | 127.0.0.2 | Chk | Rem | Add | Pol | Servers die spam hebben verstuurd | |
bl.spamcannibal.org | SPAMCANNIBAL | 127.0.0.2 | H | Chk | Rem | Add | Pol | |
bl.starloop.com | STARLOOP | 127.0.0.2 | Chk | Rem | Add | Pol | ||
rbl.cbn.net.id | CBN | 127.0.0.2 | Chk | Rem | Add | Pol | ||
0spam.fusionzero.com | 0SPAM | 127.0.0.2 | Chk | Rem | Add | Pol | 0Spam Black List | |
fnrbl.fast.net | FAST | 127.0.0.2 | Chk | Rem | Add | Pol | ||
spam.blackhole.cantv.net | CANTV | 127.0.0.2 | Chk | Rem | Add | Pol | ||
ppbl.beat.st | PPBL | 127.0.0.2 | Chk | Rem | Add | Pol | Personal DNSBL of "The George". Publicly queryable, not advertised as a public service |
|
bl.technovision.dk | TECHNOVISION | 127.0.0.2 | Chk | Rem | Add | Pol | Individual spam IP sources | |
no-more-funn.moensted.dk | NO-MORE-FUNN | various | Chk | Rem | Add | Pol | dr.moensted's bl | |
blocked.asgardnet.org | ASGARDNET | Chk | Rem | Add | Pol | |||
- | DIESPAMMER | Chk | Rem | Add | Pol | |||
black.dnsbl.securityplanet.nl | SECPLANET | 127.0.0.2 | Chk | Rem | Add | Pol | ||
dnsbl.mcu.edu.tw | MCU-TW | 127.0.0.2 | Chk | Rem | Add | Pol | ||
- | LOSABL | Chk | Rem | Add | Pol | LOw Security Areas Blocking List | ||
blacklist.sequoia.ops.asp.att.net | ATT | ? | ? | Chk | Rem | Add | Pol | AT&T private blacklist |
l1.apews.rhsbl.sorbs.net | APEWS | 127.0.0.2 | Chk | Rem | Add | Pol | Anonymous Postmasters Early Warning System |
|
l2.apews.dnsbl.sorbs.net | ||||||||
arspam.buanzo.org | ARSPAM | 127.0.0.2 | Chk | Rem | Add | Pol | ||
dnsbl.spam-champuru.livedoor.com | SPAM-CHAMPURU | 127.0.0.2 | Chk | Rem | Add | Pol | Spam affecting Livedoor | |
dnsbl.cmbix.com | CMBIX | 127.0.0.2 | Chk | Rem | Add | Pol | A highly active maintained ip black list for use with mail programs and also others. All listed ips here are 100% verified spam and/or abusive. False positives are unacceptable for us. | |
bl.spameatingmonkey.net | SEM-BLACK | 127.0.0.2 | Chk | Rem | Add | Pol | Policy choices, spamtraps, and trusted user submissions | |
dnsbl.tornevall.org | TORNEVALL | various | Chk | Rem | Add | Pol | Proxy/Spam/Abuse-blocking since 2006 | |
spam.pedantic.org | PEDANTIC | 127.0.0.2 | Chk | Rem | Add | Pol | service for blocking people who have sent me spam | |
dnsbl.inps.de | INPS | 127.0.0.2 | Chk | Rem | Add | Pol | IP addresses from which we received mails, that were classified as spam | |
DNS Whitelists |
||||||||
These are the inverse of a blackhole list; entries in these lists should be allowed, not denied. Some of these whitelists are provided as part of a commercial trust service, while others are generated on a peer-to-peer or individual trust basis. | ||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
*.dnswl.karmasphere.com | KARMA | various | Chk | N/A | N/A | Pol | Karmasphere is like Santa Claus: it knows if you've been naughty, and it knows if you've been nice. | |
query.bondedsender.org | SENDERSCORE | 127.0.0.10 | A | Chk | Rem | Add | Pol | Sender Score Certified |
whitelist.sci.kun.nl | SCI.KUN.NL | 127.0.0.2 | Chk | Rem | Add | Pol | C&CZ's eigen witte lijst | |
- | HABEAS-HUL | 127.0.0.2 | Chk | Rem | Add | Pol | DNS-based IP address listing of Habeas licensees | |
dnswl.isoc.bg | ISOC-WL | 127.0.0.2 | Chk | Rem | Add | Pol | ISOC Whitelisted IPs | |
- | MXES | 127.0.0.2 | Chk | Rem | Add | Pol | Track good mail servers | |
cabal.web-o-trust.org | WEB-O-TRUST | 127.0.0.2 | Chk | Rem | Add | Pol | Whitelisting network | |
exemptions.ahbl.org | AHBL-EXEMPTIONS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
iadb.isipp.com | IADB | various | Chk | Rem | Add | Pol | ISIPP Accreditation Database aka SuretyMail. IADB returns detailed response codes; IADB 2 returns a score; and IDDB is queried for domains. | |
iadb2.isipp.com | ||||||||
iddb.isipp.com | ||||||||
- | OUTBOUND | - | Chk | Rem | Add | Pol | Subscription only | |
nlwhitelist.dnsbl.bit.nl | 127.0.0.2 | Chk | Rem | Add | Pol | Whitelist of virbl, Dutch | ||
cml.anti-spam.org.cn | CASA-CML | 127.0.8.1 | Chk | Rem | Add | Pol | Chinese mail server white list | |
list.dnswl.org | DNSWL | 127.0.0.2 | H | Chk | Rem | Add | Pol | Please use experimentally only; known good senders |
nobl.junkemailfilter.com | HOSTKARMA | various | Chk | Rem | Add | Pol | IP and host names that should never be in any blacklist | |
- | SWISSWL | - | Chk | Rem | Add | Pol | IP-database of all secure Swiss SMTP servers | |
Un-Whitelisted IP DNSBLs |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
hil.habeas.com | HABEAS-HIL | 127.0.0.2 | A | Chk | Rem | Add | Pol | Habeas BlackList. |
wadb.isipp.com | WADB | various | Chk | Rem | Add | Pol | ISIPP Withdrawn Accreditation Database | |
RHSBL Lists |
||||||||
Right-Hand Side Blackhole Lists are used to block by the email Address of the “envelope sender” - i.e. the domain name used by the sender. |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
bl.deadbeef.com | DEADBEEF-RHSBL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
dnsbl.isoc.bg | ISOC | 127.0.0.2 | Chk | Rem | Add | Pol | Mostly bulgarian spam | |
in.dnsbl.org | DNSBL-IN | Chk | Rem | Add | Pol | For DNS Providers to collectively deny DNS services to known spam domains | ||
ex.dnsbl.org |
DNSBL-EX | various | Chk | Rem | Add | Pol | Domains that spammed easyDNS | |
zebl.zoneedit.com | ZEBL | 127.0.0.2 | Chk | Rem | Add | Pol | Combination list of domains from spews, spamsites, and people who have sent spam to zoneedit. ban.zebl.zoneedit.com is used to collectively deny DNS services to known spam domains. Under no circumstances should it be used by any MTA for mail filtering in any capacity whatsoever. |
|
bulk.rhs.mailpolice.com | MAILPOLICE-RHS | 127.0.0.2 | R | Chk | Rem | Add | Pol | Domains which have been used to send spam to our customers |
porn.rhs.mailpolice.com | ||||||||
fraud.rhs.mailpolice.com | ||||||||
block.rhs.mailpolice.com | ||||||||
dynamic.rhs.mailpolice.com | ||||||||
adv.rhs.mailpolice.com | ||||||||
webmail.rhs.mailpolice.com | ||||||||
postmaster.rfc-ignorant.org | RFCI-POSTMASTER | 127.0.0.3 | Chk | Rem | Add | Pol | Domains without a working postmaster mailbox | |
dsn.rfc-ignorant.org | RFCI-DSN | 127.0.0.2 | Chk | Rem | Add | Pol | Domains refusing any mail from “<>” | |
abuse.rfc-ignorant.org | RFCI-ABUSE | 127.0.0.4 | Chk | Rem | Add | Pol | Domains without a working abuse mailbox | |
whois.rfc-ignorant.org | RFCI-WHOIS | various | Chk | Rem | Add | Pol | Domains without “correct” whois | |
bogusmx.rfc-ignorant.org | RFCI-BOGUSMX | 127.0.0.8 | Chk | Rem | Add | Pol | Domains without working mail exchanger records | |
badconf.rhsbl.sorbs.net | SORBS-BADCONF | 127.0.0.2 | Chk | Rem | Add | Pol | A or MX records point to bad address space | |
nomail.rhsbl.sorbs.net | SORBS-NOMAIL | 127.0.0.2 | Chk | Rem | Add | Pol | Domain owners say no mail ever sent with these domains | |
rhsbl.ahbl.org | AHBL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
dnsbl.cyberlogic.net | CYBERLOGIC | 127.0.0.2 | Chk | Rem | Add | Pol | “...used to prevent reoccuring spam sent to Cyberlogic. Nominations come from our clients...” | |
spamdomain.block.transip.nl | TRANSIP | 127.0.0.2 | Chk | Rem | Add | Pol | Domeinen van bekende spamoperaties | |
dnsrbl.swinog.ch | SWINOG-DNSRBL | 127.0.0.3 | Chk | Rem | Add | Pol | Spamtrap fed by 100 spamtraps within switzerland | |
hostkarma.junkemailfilter.com | HOSTKARMA | various | Chk | Rem | Add | Pol | ||
dbl.spamhaus.org | DBL | various | Chk | Rem | N/A | Pol | Spam domains including spam payload URLs, spam sources and senders ("right-hand side"), known spammers and spam gangs, and phish, virus and malware-related sites. | |
HTTP Abusers |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
dnsbl.httpbl.org | HTTP:BL | various | Chk | Rem | Add | Pol | Requires access key from Project Honeypot. Can ask for an offline download. |
|
DNSBL Testing |
||||||||
Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
nofalsenegative.stopspam.samspade.org | NO-FALSE-NEGATIVES | 127.0.0.2 | N/A | N/A | N/A | N/A | Blocks all of IPv4 | |
nofalsepositive.stopspam.samspade.org | NO-FALSE-POSITIVES | N/A | N/A | N/A | N/A | N/A | Lists none of IPv4 | |
blocked.secnap.net | BLOCKED-SECNAP | 127.0.0.2 | N/A | N/A | N/A | N/A | Blocks all of IPv4 | |
ipv4.fahq2.com | FAHQ2-IPV4 | 127.0.0.2 | N/A | N/A | N/A | N/A | Blocks all of IPv4 | |
random.bl.gweep.ca | GWEEP-RANDOM | 127.0.0.2 | N/A | N/A | N/A | N/A | Randomly blocks IP Addresses | |
Dead DNSBLs |
||||||||
These DNSBLs are dead, which means that you should no longer be using them. Check the list of DNSBLs you have carefully against this list. Using a dead DNSBL can lead to unexpected consequences, such as the rejection of all incoming email. | ||||||||
Dead DNSBL Lists | ||||||||
DNS-based Spam Databases - www.declude.com/Articles.asp?ID=97
Blacklists Compared - www.sdsc.edu/~jeff/spam/Blacklists_Compared.html
Simple RBL false-positive test - www.davideous.com/rblefftest/
DNSBL List - www.dnsbl.info/dnsbl-list.php
Blocklists Supported by the SpamBouncer - www.spambouncer.org/reference/blocklists.shtml
DNSBL comparison - www.nber.org/sys-admin/dnsbl-comparison.html
Comparison of DNS blacklists - en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
RBL Registry — Known Reverse Domain Name System Lists - www.techtheft.info/zones/?expand=50
Karmasphere - www.karmasphere.com/
CBL FAQ - cbl.abuseat.org/faq.html - scroll down to "Other DNSBLs"
MultiRBL list - multirbl.valli.org/index.php?act=list