
DNS Blackhole Lists or DNSBLs are a way to filter spam by using Domain Name Service (DNS) records as a database of policies relating to either an IP address or domain name, which can be used to decide whether or not to accept (or label) email. Don't use any of these without testing them first and reading any available listing policy. Test the DNSBLs you use regularly. If a DNSBL suddenly dies or starts to return positive results for all queries, will all of your incoming email be rejected?
The “Copy” tags in the table indictate if it is possible to use one of the following methods to take a copy of the DNS zone: A: Zone Transfer, R: RSYNC, H: HTTP, B: BGP. Links to check the lists (Chk), remove entries (Rem), add entries (Add) and to find the listing policy (Pol) are available for most lists.
Major Spam Source DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| sbl.spamhaus.org | SBL | 127.0.0.2 | Chk | Rem | Add | Pol | Spamhaus Block List | |
| zen.spamhaus.org | SBL-ZEN | various | Chk | Rem | Add | Pol | Spamhaus Block List - the SBL, XBL and PBL in combination | |
| *.dnsbl.karmasphere.com | KARMA | various | Chk | N/A | N/A | Pol | Karmasphere is like Santa Claus: it knows if you've been naughty, and it knows if you've been nice | |
| dnsbl.ahbl.org | AHBL | various | Chk | Rem | Add | Pol | Abusive Hosts Blocking List | |
| dnsbl.njabl.org | NJABL | various | R | Chk | Rem | Add | Pol | Not Just Another Bogus List |
| dnsbl.sorbs.net | SORBS | various | Chk | Rem | Add | Pol | Mirror at DNSBL.NET.AU | |
| sorbs.dnsbl.net.au | ||||||||
| blackholes.five-ten-sg.com | FIVE-TEN | various | Chk | Rem | Add | Pol | ||
| hostkarma.junkemailfilter.com | HOSTKARMA | various | Chk | Rem | Add | Pol | ||
| cbl.anti-spam.org.cn | CASA-CBL | various | Chk | Rem | Add | Pol | China Anti-Spam Alliance Black List | |
| cblplus.anti-spam.org.cn | ||||||||
| cblless.anti-spam.org.cn | ||||||||
Paid Subscription DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| rbl-plus.mail-abuse.org | MAPS-RBL+ | 127.0.0.2 | Chk | Rem | Add | Pol | Nomination of spam sources | |
| - | ivmSIP and ivmSIP/24 | - | R | Chk | Rem | Add | Pol | Very good at catching low-flying spammers - only available by rsync. imvSIP/24 lists ranges used by spammers, not just single IPs. |
| varies | MAILDEF | 127.0.0.2 | Chk | Rem | Add | Pol | Custom DNSBLs | |
| bl.redhatgate.com | POSTFIXGATE | 127.0.0.1 | Chk | Rem | Add | Pol | IPs that send spam to Spam Catcher e-mail Addresses | |
| *.dnsbl.epaxsys.net | EPAXSYS | 127.0.0.2 | Chk | Rem | Add | Pol | Privately maintained and managed lists | |
| t1.bl.dnsbl.net.au | DNSBL.NET.AU-T1 | 127.0.0.2 | A | Chk | Rem | Add | Pol | Based upon the identity of the most recent, non-local mail server, that attempts to deliver email |
| c10.rbl.hk | MAILPROVE | 127.0.0.2 | Chk | Rem | Add | Pol | Asia-based spam source DNSBL | |
| - | MIPSPACE | 127.0.0.2 | Chk | Rem | Add | Pol | IP Addresses associated with known commercial marketing companies | |
| - | ATLBL | 127.0.0.2 | Chk | Rem | Add | Pol | Designed to combat many different types of Internet abuse | |
User Submission DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| bl.spamcop.net | SPAMCOP | 127.0.0.2 | Chk | Rem | Add | Pol | Experimental list, not for use in a production environment | |
| varies | DRBL-AGK DRBL-CROCO DRBL-BIZEXPERT |
127.0.0.2 | Chk | Rem | Add | Pol | Distributed Realtime Blackhole List | |
| bl.emailbasura.org | EMAILBASURA | 127.0.0.2 | Chk | Rem | Add | Pol | Spanish Language DNSBL. Spam is reported via the website and checked against a white-list. | |
Spamtrap Driven or Automated DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
|
db.wpbl.info |
WPBL | 127.0.0.2 | R | Chk | Rem | Add | Pol | Weighted Private Block List. WPBL should not be used to block mail or deny SMTP connections. It is most effective in a scoring-based system rather than black-and-white filtering. |
| wpbl.dnsbl.net.au | ||||||||
| msgid.bl.gweep.ca | GWEEP-MSGID | 127.0.0.2 | Chk | Rem | Add | Pol | IPs that sent email to bad Addresses in the last two and a half hours. | |
| rmst.dnsbl.net.au | MST | 127.0.0.2 | Chk | Rem | Add | Pol | Multiple Spam Traps Block List | |
| sbbl.they.com | SSBL | 127.0.0.2 | Chk | Rem | Add | Pol | Spamtraps on they.com | |
| dnsbl.kempt.net | KEMPT | 127.0.0.2 | Chk | Auto | Add | Pol | Contact Kempt if you use this list | |
| blacklist.woody.ch | WOODY | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| psbl.surriel.com | SURRIEL-PSBL | 127.0.0.2 | R | Chk | Rem | Add | Pol | Passive Spam Block List |
| ucepn.dnsbl.net.au | UCEPROTECT | 127.0.0.2 | R H | Chk | Rem | Add | Pol | Hosts blacklist operated by UCEProtect |
| dnsbl-1.uceprotect.net | ||||||||
| dnsbl-2.uceprotect.net | ||||||||
| dnsbl-3.uceprotect.net | ||||||||
| virbl.bit.nl | VIRBL | 127.0.0.2 | H | Chk | Rem | Add | Pol | Virus or Worm Sources |
| rot.blackhole.cantv.net | CANTV-ROT | 127.0.0.2 | Chk | Auto | Add | Pol | Virus or Worm Sources | |
| virus.rbl.jp | RBL.JP-VIRUS | 127.0.0.2 | Chk | Rem | Add | Pol | Virus or Worm Sources | |
| ix.dnsbl.manitu.net | NIXSPAM | 127.0.0.2 | H | Chk | Rem | Add | Pol | automatically generated entries |
| wormrbl.imp.ch | IMP-WORMS | 127.0.0.4 | H | Chk | Rem | Add | Pol | Worms from the last 2 days |
| spamrbl.imp.ch | IMP-SPAM | 127.0.0.5 | Chk | Rem | Add | Pol | Spam from the last 2 days | |
| virus.rbl.msrbl.net | MSRBL-VIRUS | 127.0.0.2 | Chk | Rem | Add | Pol | Hosts found sending virus mails | |
| phishing.rbl.msrbl.net | MSRBL-PHISH | 127.0.0.2 | Chk | Rem | Add | Pol | Hosts found sending phishing mails | |
| images.rbl.msrbl.net | MSRBL-IMAGES | 127.0.0.2 | Chk | Rem | Add | Pol | Hosts found sending mail contaning spam images | |
| spam.rbl.msrbl.net | MSRBL-SPAM | 127.0.0.2 | Chk | Rem | Add | Pol | Hosts found sending mail contaning spam | |
| combined.rbl.msrbl.net | MSRBL-COMBINED | 127.0.0.2 | Chk | Rem | Add | Pol | All the above lists combined | |
| rbl.interserver.net | INTERSERVER | 127.0.0.2 | Chk | Rem | Add | Pol | Checks multiple spam traps and blocks the IPs of the sender to those email addresses. | |
| spamlist.or.kr | KISARBL | 127.0.0.2 | Chk | Rem | Add | Pol | Real time spam IP block list by Korean Information Security Agency | |
| dyna.spamrats.com | RATS | 127.0.0.2 | Chk | Rem | Add | Pol | Infected PC or BotNet sending spam | |
| noptr.spamrats.com | ||||||||
| spam.spamrats.com | ||||||||
| dnsbl.abuse.ch | ABUSE-CH | 127.0.0.2 | Chk | Rem | Add | Pol | IP addresses that have sent spam to a honeypot. Use combined.abuse.ch to also include drone.abuse.ch - see below. | |
| combined.abuse.ch | ||||||||
| dnsbl.inps.de | INPS | 127.0.0.2 | Chk | Rem | Add | Pol | If an e-mail is detected as spam and the IP address of the sending host meets some additional requirements | |
| - | BRBL | unknown | Chk | Rem | Add | Pol | Barracuda Reputation Block List - ask for access via the website | |
| dnsbl.dronebl.org | DRONEBL | 127.0.0.2 | Chk | Rem | Add | Pol | DroneBL is a realtime monitor of abusable IPs, which has the goal of stopping abuse of infected machines. | |
Behaviour Driven DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| bl.deadbeef.com | DEADBEEF | 127.0.0.2 | Chk | Rem | Add | Pol | ISPs who do not accept abuse reports | |
| ricn.dnsbl.net.au | ICN | 127.0.0.2 | Chk | Rem | Add | Pol | Incorrectly Configured Networks | |
| forbidden.icm.edu.pl | ICM.EDU.PL | 127.0.0.2 | Chk | Rem | Add | Pol | Companies which took ORBS administrator to court | |
| probes.dnsbl.net.au | PROBES | 127.0.0.2 | Chk | Rem | Add | Pol | Hosts which probed dnsbl.net.au | |
| query.senderbase.org | SENDERBASE | TXT | Chk | Rem | Add | Pol | Returns TXT records | |
| ubl.lashback.com ubl.unsubscore.com |
LASHBACK | 127.0.0.2 | A H H | Chk | Rem | Add | Pol | Unsubscribe abusers |
| test.blocklist.org | PHOENIX | 127.0.0.2 | Chk | Rem | Add | Pol | p2p blocklist (includes spam listings) | |
| ips.backscatterer.org | BACKSCATTER | 127.0.0.2 | Chk | Rem | N/A | Pol | Backscatter and Sender Callout abusers | |
URIBLs and Content Based DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| ksi.dnsbl.net.au | KSI | 127.0.0.2 | Chk | Rem | Add | Pol | Key Spam Indicators Block List | |
|
multi.surbl.org |
SURBL | 127.0.0.2 | R H | Chk | Rem | Add | Pol | Spam URI Realtime Blocklist. Lists domains seen in URLs in spam messages reported to various sources, to be used to block based on URL. |
| ab.surbl.org | ||||||||
| ob.surbl.org | ||||||||
| sc.surbl.org | ||||||||
| ws.surbl.org | ||||||||
| ph.surbl.org | ||||||||
| dnsbl.othello.ch | MOD-DNSBL | various | A | Chk | Rem | Add | Pol | Full URL list, for use with web filtering |
| uribl.swinog.ch | IMP-URIBL | 127.0.0.2 | Chk | Rem | Add | Pol | SWINOG URIBL | |
| bsb.spamlookup.net | SPAMLOOKUP | 127.0.0.2 | Chk | Rem | Add | Pol | Domains seen in blog spam | |
| dob.sibl.support-intelligence.net | DOB | 127.0.0.2 | Chk | Rem | Add | Pol | The Day Old Bread List - domains registered in the last five days | |
| url.rbl.jp | RBL.JP-URL | 127.0.0.2 | Chk | Rem | Add | Pol | Check URLs in e-mail against spam URLs | |
| dyndns.rbl.jp | RBL.JP-DYN | 127.0.0.2 | Chk | Rem | Add | Pol | Check URLs in e-mail against free dynamic DNS services | |
| - | ivmURI | - | R | Chk | Rem | Add | Pol | Similar to SURBL and URIBL - access by subscription |
Bogon, Hijacked & Zombie Network DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| bogons.cymru.com | CYMRU-BOGON | 127.0.0.2 | A H B | Chk | Rem | Add | Pol | Bogon IP allocations |
| zombie.dnsbl.sorbs.net | SORBS-ZOMBIES | 127.0.0.2 | Chk | Rem | Add | Pol | List of networks hijacked from their original owners | |
Open Relay DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| relays.mail-abuse.org | MAPS-RSS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| omrs.dnsbl.net.au | OMRS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| osrs.dnsbl.net.au | OSRS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| orvedb.aupads.org | ORVEDB | 127.0.0.2 | Chk | Auto | Add | Pol | ||
| relays.nether.net | NETHER-OR | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| unsure.nether.net | ||||||||
| relays.bl.gweep.ca | GWEEP-RELAYS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| smtp.dnsbl.sorbs.net | SORBS-RELAYS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| relays.bl.kundenserver.de | KUNDEN | 127.0.0.2 | Chk | Rem | Add | Pol | ||
Open Proxy DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| xbl.spamhaus.org | SPAMHAUS-XBL | 127.0.0.4-6 | Chk | N/A | Add | Pol | Exploits Block List - illegal 3rd party exploits. Incorporates CBL data and OPM data. |
|
| cbl.abuseat.org | CBL | 127.0.0.2 | R | Chk | Rem | Add | Pol | Data is used by XBL, so don't use both. |
| drone.abuse.ch | ABUSE-CH | 127.0.0.2 | Chk | Rem | Add | Pol | IP addresses that are part of a spam- or malware-related fast-flux botnet | |
| proxy.bl.gweep.ca | GWEEP-PROXY | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| - | MAPS-OPS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| owps.dnsbl.net.au | OWPS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| ohps.dnsbl.net.au | OHPS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| osps.dnsbl.net.au | OSPS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| http.dnsbl.sorbs.net | SORBS-HTTP | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| socks.dnsbl.sorbs.net | SORBS-SOCKS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| misc.dnsbl.sorbs.net | SORBS-PROXY | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| proxy.block.transip.nl | TRANSIP-PROXY | 127.0.0.2 | Chk | Rem | Add | Pol | ||
Open Formmail DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| web.dnsbl.sorbs.net | SORBS-WEB | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| owfs.dnsbl.net.au | OWFS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
Unconfirmed Mailing Lists |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| nml.mail-abuse.org | MAPS-NML | 127.0.0.2 | Chk | Rem | Add | Pol | ||
Dialup or Dynamic IP DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| pbl.spamhaus.org | PBL | tba | Chk | Rem | Add | Pol | Spamhaus Policy Block List | |
| dialups.mail-abuse.org | MAPS-DUL | 127.0.0.3 | Chk | Rem | Add | Pol | ||
| rdts.dnsbl.net.au | RDTS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| dul.ru | DUL.RU | 127.0.0.2 | A | Chk | Rem | Add | Pol | |
| duinv.aupads.org | AUPADS-DUINV | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| pool.dnsbl.solid.net | SOLID-POOL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| dynablock.sorbs.net | SORBS-DYNA | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| dul.dnsbl.sorbs.net | ||||||||
| dyn.dnsbl.epaxsys.net | EPAXSYS-DYN | 127.0.0.2 | Chk | Rem | Add | Pol | Usage of ePaxsys Zones is by request and contract only | |
| residential.block.transip.nl | TRANSIP-RES | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| dynip.rothen.com | DYNIP | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| dul.blackhole.cantv.net | CANTV DUL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| cdl.anti-spam.org.cn | CDL | 127.0.8.4 | Chk | Rem | Add | Pol | Dynamic addresses in China (including Taiwan) | |
| short.rbl.jp | RBL.JP-SHORT | 127.0.0.2 | Chk | Rem | Add | Pol | ADSL or PPP connections | |
Focused DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| <country code>.rbl.cluecentral.net | CLUECENTRAL | 127.0.0.2 | Chk | N/A | Add | Pol | Block or whitelist countries and/or netblocks based on origin AS number | |
| <AS number>.rbl.cluecentral.net | ||||||||
| *.blackholes.us | BLACKHOLES-US | 127.0.0.2 | Chk | N/A | Add | Pol | Block networks or countries | |
| *.cc.countries.nerd.dk | NERD-COUNTRIES | 127.0.0.2 | Chk | N/A | Add | Pol | Lists IP space by ccTLD - uses ISO country codes. Website down as of 09/2005 | |
| *.ascc.dnsbl.bit.nl | ASCC | various | Chk | N/A | Add | Pol | Countrycode and BGP Autonomous System | |
| asiaspam.spamblocked.com | SPAMBLOCKED | 127.0.0.2 | Chk | N/A | Add | Pol | ||
| eurospam.spamblocked.com | ||||||||
| lacnic.spamblocked.com | ||||||||
| isps.spamblocked.com | ||||||||
| *.dnsbl.epaxsys.net | EPAXSYS-CC | 127.0.0.2 | Chk | N/A | Add | Pol | The following countries are currently listed: Mainland China, Korea, Thailand, Nigeria and Malaysia. Usage of ePaxsys Zones is by request and contract only. |
|
| korea.services.net | KOREA | 127.0.0.2 | Chk | N/A | Add | Pol | South Korean IP space | |
| fl.chickenboner.biz | CHICKENBONER | 127.0.0.2 | Chk | N/A | Add | Pol | Florida Blackhole List | |
| ybl.megacity.org | YBL | 127.0.0.2 | Chk | N/A | Add | Pol | Netblocks known to be used by Yahoo | |
| flowgoaway.com | FLOWGO-AWAY | 127.0.0.2 | Chk | N/A | Add | Pol | Flowgo Blacklist, published by Intersil | |
| t3direct.dnsbl.net.au | T3DIRECT | 127.0.0.2 | Chk | N/A | Add | Pol | T3Direct Block List | |
| tor.ahbl.org | TOR-BL | 127.0.0.2 | Chk | Rem | Add | Pol | Hosts on the Tor network | |
| tor.dnsbl.sectoor.de | TOR-SECTOOR | 127.0.0.2 | Chk | N/A | N/A | Pol | Blacklist for Tor servers. torserver.tor.dnsbl.sectoor.de also lists /24 (“Class C”) networks around Tor exit nodes. | |
| torserver.tor.dnsbl.sectoor.de | ||||||||
Local and Personal DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| mail.people.it | PEOPLE.IT | 127.0.0.2 | Chk | Rem | Add | Pol | Local bl at people.it | |
| blocked.hilli.dk | HILLI | 127.0.0.2 | Chk | Rem | Add | Pol | Local bl at hilli.dk | |
| dnsbl.cyberlogic.net | CYBERLOGIC | 127.0.0.2 | Chk | Rem | Add | Pol | “...used to prevent reoccuring spam sent to Cyberlogic. Nominations come from our clients...” | |
| rsbl.aupads.org | RSBL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| blacklist.sci.kun.nl | SCI.KUN.NL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| dnsbl.isoc.bg | ISOC | 127.0.0.2 | Chk | Rem | Add | Pol | Mostly Bulgarian spammers | |
| spamsources.dnsbl.info | SPAMSOURCES | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| all.spamblock.unit.liu.se | SPAMBLOCK | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| bl.csma.biz | MCFAEN | 127.0.0.2 | Chk | Rem | Add | Pol | McFadden Associates free spam blacklist | |
| sbl.csma.biz | ||||||||
| dnsbl.solid.net | SOLID | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| map.spam-rbl.com | SPAM-RBL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| fresh.sa_slip.rbl.arix.com | ARIX-SLIP | 127.0.0.2 | Chk | Rem | Add | Pol | Spammers that get round SpamAssassin | |
| stale.sa_slip.arix.com | ||||||||
| fresh.dict.rbl.arix.com | ARIX-DICT | 127.0.0.2 | Chk | Rem | Add | Pol | Dictionary Spammers | |
| stale.dict.rbl.arix.com | ||||||||
| access.redhawk.org | REDHAWK | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| blackholes.alphanet.ch | ALPHANET | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| spamsources.spamblocked.com | SPAMBLOCKED | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| spam.wytnij.to | WYTNIJ | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| 3y.spam.mrs.kithrup.com | KITHRUP | 0.0.0.0 | Chk | Rem | Add | Pol | ||
| mail-abuse.blacklist.jippg.org | JIPPG | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| spamguard.leadmon.net | LEADMON | various | Chk | Rem | Add | Pol | Dead? | |
| dnsbl.jammconsulting.com | JAMM | various | Chk | Rem | Add | Pol | Dead? | |
| rbl.snark.net | SNARK | various | Chk | Rem | Add | Pol | ||
| dnsbl.mags.net | MAGS | 127.0.0.2 | Chk | Rem | Add | Pol | See this post | |
| - | PUAS | 127.0.0.2 | Chk | Rem | Add | Pol | Private DNSBL of Spanish Universities | |
| spamsource.block.transip.nl | TRANSIP | 127.0.0.2 | Chk | Rem | Add | Pol | Servers die spam hebben verstuurd | |
| bl.spamcannibal.org | SPAMCANNIBAL | 127.0.0.2 | H | Chk | Rem | Add | Pol | |
| bl.starloop.com | STARLOOP | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| rbl.cbn.net.id | CBN | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| 0spam.fusionzero.com | 0SPAM | 127.0.0.2 | Chk | Rem | Add | Pol | 0Spam Black List | |
| fnrbl.fast.net | FAST | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| spam.blackhole.cantv.net | CANTV | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| ppbl.beat.st | PPBL | 127.0.0.2 | Chk | Rem | Add | Pol | Personal DNSBL of "The George". Publicly queryable, not advertised as a public service |
|
| blackholes.uceb.org | UCEB | 127.0.0.2 | Chk | Rem | Add | Pol | The motto is: first block the access, then talk. | |
| bl.technovision.dk | TECHNOVISION | 127.0.0.2 | Chk | Rem | Add | Pol | Individual spam IP sources | |
| no-more-funn.moensted.dk | NO-MORE-FUNN | various | Chk | Rem | Add | Pol | dr.moensted's bl | |
| blocked.asgardnet.org | ASGARDNET | Chk | Rem | Add | Pol | |||
| - | DIESPAMMER | Chk | Rem | Add | Pol | |||
| black.dnsbl.securityplanet.nl | SECPLANET | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| dnsbl.mcu.edu.tw | MCU-TW | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| - | LOSABL | Chk | Rem | Add | Pol | LOw Security Areas Blocking List | ||
| blacklist.sequoia.ops.asp.att.net | ATT | ? | ? | Chk | Rem | Add | Pol | AT&T private blacklist |
| l1.apews.rhsbl.sorbs.net | APEWS | 127.0.0.2 | Chk | Rem | Add | Pol |
Anonymous Postmasters Early Warning System |
|
| l2.apews.dnsbl.sorbs.net | ||||||||
DNS Whitelists |
||||||||
| These are the inverse of a blackhole list; entries in these lists should be allowed, not denied. Some of these whitelists are provided as part of a commercial trust service, while others are generated on a peer-to-peer or individual trust basis. | ||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| *.dnswl.karmasphere.com | KARMA | various | Chk | N/A | N/A | Pol | Karmasphere is like Santa Claus: it knows if you've been naughty, and it knows if you've been nice. | |
| query.bondedsender.org | SENDERSCORE | 127.0.0.10 | A | Chk | Rem | Add | Pol | Sender Score Certified |
| whitelist.sci.kun.nl | SCI.KUN.NL | 127.0.0.2 | Chk | Rem | Add | Pol | C&CZ's eigen witte lijst | |
| - | HABEAS-HUL | 127.0.0.2 | Chk | Rem | Add | Pol | DNS-based IP address listing of Habeas licensees | |
| dnswl.isoc.bg | ISOC-WL | 127.0.0.2 | Chk | Rem | Add | Pol | ISOC Whitelisted IPs | |
| - | MXES | 127.0.0.2 | Chk | Rem | Add | Pol | Track good mail servers | |
| cabal.web-o-trust.org | WEB-O-TRUST | 127.0.0.2 | Chk | Rem | Add | Pol | Whitelisting network | |
| whitelist.spamblocked.com | SPAMBLOCKED | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| exemptions.ahbl.org | AHBL-EXEMPTIONS | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| iadb.isipp.com | IADB | various | Chk | Rem | Add | Pol | ISIPP Accreditation Database | |
| iadb2.isipp.com | ||||||||
| iddb.isipp.com | ||||||||
| - | OUTBOUND | - | Chk | Rem | Add | Pol | Subscription only | |
| nlwhitelist.dnsbl.bit.nl | 127.0.0.2 | Chk | Rem | Add | Pol | Whitelist of virbl, Dutch | ||
| spf.trusted-forwarder.org | T-FWL | A R H | Chk | Rem | Add | Pol | Trusted Forwarder SPF Global Whitelist | |
| cml.anti-spam.org.cn | CASA-CML | 127.0.8.1 | Chk | Rem | Add | Pol | Chinese mail server white list | |
| list.dnswl.org | DNSWL | 127.0.0.2 | H | Chk | Rem | Add | Pol | Please use experimentally only; known good senders |
| nobl.junkemailfilter.com | HOSTKARMA | various | Chk | Rem | Add | Pol | IP and host names that should never be in any blacklist | |
| - | SWISSWL | - | Chk | Rem | Add | Pol | IP-database of all secure Swiss SMTP servers | |
Un-Whitelisted IP DNSBLs |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| hil.habeas.com | HABEAS-HIL | 127.0.0.2 | A | Chk | Rem | Add | Pol |
Habeas BlackList. |
| wadb.isipp.com | WADB | various | Chk | Rem | Add | Pol | ISIPP Withdrawn Accreditation Database | |
RHSBL Lists |
||||||||
|
Right-Hand Side Blackhole Lists are used to block by the email Address of the “envelope sender” - i.e. the domain name used by the sender. |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| bl.deadbeef.com | DEADBEEF-RHSBL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| dnsbl.isoc.bg | ISOC | 127.0.0.2 | Chk | Rem | Add | Pol | Mostly bulgarian spam | |
| in.dnsbl.org | DNSBL-IN | Chk | Rem | Add | Pol | For DNS Providers to collectively deny DNS services to known spam domains | ||
ex.dnsbl.org |
DNSBL-EX | various | Chk | Rem | Add | Pol | Domains that spammed easyDNS | |
| zebl.zoneedit.com | ZEBL | 127.0.0.2 | Chk | Rem | Add | Pol |
Combination list of domains from spews, spamsites, and people who have sent spam to zoneedit. ban.zebl.zoneedit.com is used to collectively deny DNS services to known spam domains. Under no circumstances should it be used by any MTA for mail filtering in any capacity whatsoever. |
|
| bulk.rhs.mailpolice.com | MAILPOLICE-RHS | 127.0.0.2 | R | Chk | Rem | Add | Pol | Domains which have been used to send spam to our customers |
| porn.rhs.mailpolice.com | ||||||||
| fraud.rhs.mailpolice.com | ||||||||
| block.rhs.mailpolice.com | ||||||||
| dynamic.rhs.mailpolice.com | ||||||||
| adv.rhs.mailpolice.com | ||||||||
| webmail.rhs.mailpolice.com | ||||||||
| rddn.dnsbl.net.au | RDDN | 127.0.0.2 | H | Chk | Rem | Add | Pol | Dynamic Domains Names List |
| postmaster.rfc-ignorant.org | RFCI-POSTMASTER | 127.0.0.3 | Chk | Rem | Add | Pol | Domains without a working postmaster mailbox | |
| dsn.rfc-ignorant.org | RFCI-DSN | 127.0.0.2 | Chk | Rem | Add | Pol | Domains refusing any mail from “<>” | |
| abuse.rfc-ignorant.org | RFCI-ABUSE | 127.0.0.4 | Chk | Rem | Add | Pol | Domains without a working abuse mailbox | |
| whois.rfc-ignorant.org | RFCI-WHOIS | various | Chk | Rem | Add | Pol | Domains without “correct” whois | |
| bogusmx.rfc-ignorant.org | RFCI-BOGUSMX | 127.0.0.8 | Chk | Rem | Add | Pol | Domains without working mail exchanger records | |
| badconf.rhsbl.sorbs.net | SORBS-BADCONF | 127.0.0.2 | Chk | Rem | Add | Pol | A or MX records point to bad address space | |
| nomail.rhsbl.sorbs.net | SORBS-NOMAIL | 127.0.0.2 | Chk | Rem | Add | Pol | Domain owners say no mail ever sent with these domains | |
| rhsbl.ahbl.org | AHBL | 127.0.0.2 | Chk | Rem | Add | Pol | ||
| dnsbl.cyberlogic.net | CYBERLOGIC | 127.0.0.2 | Chk | Rem | Add | Pol | “...used to prevent reoccuring spam sent to Cyberlogic. Nominations come from our clients...” | |
| spamdomain.block.transip.nl | TRANSIP | 127.0.0.2 | Chk | Rem | Add | Pol | Domeinen van bekende spamoperaties | |
|
jwrh.dnsbl.net.au |
JWRH | 127.0.0.2 | H | Chk | Rem | Add | Pol | Joe Wein blocklist |
| dnsrbl.swinog.ch | SWINOG-DNSRBL | 127.0.0.3 | Chk | Rem | Add | Pol | Spamtrap fed by 100 spamtraps within switzerland | |
| bl.open-whois.org | OPEN-WHOIS | various | Chk | Rem | Add | Pol | Domains which are privately (or anonymously) registered, e.g. through services such as Domains By Proxy, or Moniker Privacy Protection. | |
| hostkarma.junkemailfilter.com | HOSTKARMA | various | Chk | Rem | Add | Pol | ||
HTTP Abusers |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| dnsbl.httpbl.org | HTTP:BL | various | Chk | Rem | Add | Pol | Requires access key from Project Honeypot. Can ask for an offline download. |
|
DNSBL Testing |
||||||||
| Zone | Websites | Response | Copy | Chk | Rem | Add | Pol | Notes |
| nofalsenegative.stopspam.samspade.org | NO-FALSE-NEGATIVES | 127.0.0.2 | N/A | N/A | N/A | N/A | Blocks all of IPv4 | |
| nofalsepositive.stopspam.samspade.org | NO-FALSE-POSITIVES | N/A | N/A | N/A | N/A | N/A | Lists none of IPv4 | |
| blocked.secnap.net | BLOCKED-SECNAP | 127.0.0.2 | N/A | N/A | N/A | N/A | Blocks all of IPv4 | |
| ipv4.fahq2.com | FAHQ2-IPV4 | 127.0.0.2 | N/A | N/A | N/A | N/A | Blocks all of IPv4 | |
| random.bl.gweep.ca | GWEEP-RANDOM | 127.0.0.2 | N/A | N/A | N/A | N/A | Randomly blocks IP Addresses | |
| bl.testrbl.cameldns.com | TESTRBL | 127.0.0.2 | Chk | Rem | Add | Pol | Full testing platform | |
Dead DNSBLs |
||||||||
| These DNSBLs are dead, which means that you should no longer be using them. Check the list of DNSBLs you have carefully against this list. Using a dead DNSBL can lead to unexpected consequences, such as the rejection of all incoming email. | ||||||||
| Dead DNSBL Lists | ||||||||
DNS-based Spam Databases
- www.declude.com/Articles.asp?ID=97
Blacklists
Compared - www.sdsc.edu/~jeff/spam/Blacklists_Compared.html
Simple RBL false-positive
test - www.davideous.com/rblefftest/
DNSBL List - www.dnsbl.info/dnsbl-list.php
Blocklists
Supported by the SpamBouncer - www.spambouncer.org/reference/blocklists.shtml
DNSBL comparison
- www.nber.org/sys-admin/dnsbl-comparison.html
Comparison
of DNS blacklists - en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
RBL Registry —
Known Reverse Domain Name System Lists - www.techtheft.info/zones/?expand=50
Karmasphere - www.karmasphere.com/
CBL FAQ - cbl.abuseat.org/faq.html
- scroll down to "Other DNSBLs"