THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
...
Support for the following DNSBLs is built-in, and shipped in the default configuration.
- AHBL http://www.ahbl.org/
- NJABL http://www.njabl.org/
- SORBS http://www.sorbs.net/
...
- SPAMCOP http://www.spamcop.net/
- Spamhaus PBL+SBL+XBLZEN http://www.spamhaus.org/zen/ NOTE: Spamhaus is enabled as a "free for most" provider. See: http://www.spamhaus.org/organization/dnsblusage.html.
...
- SURBL http://www.surbl.org/ NOTE: SURBL is enabled as a "free for most" provider. See: http://www.surbl.org/usage-policy.Trend Micro http://www.mailabuse.org/ NOTE: Mail Abuse aka MAPS is now TrendMicro Email Reputation Services aka RBL+. This is a commercial product and is no longer enabled by default.
- URIBL http://www.uribl.com/ NOTE: URIBL is enabled as a "free for most" provider. See: http://www.uribl.com/about.shtml.
Policy Lists
The following DNSBLs are not specifically about spam, but instead about sites which break net policies and conventions... practices which are often associated with spammers.
- Combined Bogon IP/Hijacked IP/Invalid Whois/ http://www.completewhois.com/bogons/index.htm
Whitelists
The following DNS checks are actually for WHITE lists, or sites which are certified by someone to be a reasonable sender.
...
- ISIPP Accreditation Database (IADB) http://www.isipp.com/email-accreditation/
Accuracy
Live accuracy figures for most of the DNSBLs used in SpamAssassin, based on the Oct 2003 mail feed for one user, can be found here.
Other Lists
Other places to find out about DNS blacklists / blocklists:
- Spamlinks http://spamlinks.net/filter-dnsbl.htm
- Dr. Jørgen Mash's DNS database list checker http://moensted.dk/spam/
- List of All Known DNS-based Spam Databases (blacklists) http://www.declude.com/junkmail/support/ip4r.htm
- Current Blacklist Comparison (note: no statistics for false positive rates) http://www.sdsc.edu/~jeff/spam/cbc.html
- Wikipedia on DNSBLs http://wikipedia.org/wiki/DNSBL
- Weekly Blacklist Statistics (including hit rate and false positive rate) http://www.intra2net.com/en/support/antispam/
Note that it's extremely important to compare false positive rates (nonspam messages marked as spam), as well as spam hit-rates, when evaluating any anti-spam system, include DNS blocklists. (For example, a blocklist that returned a match for every single mail would 'catch all the spam', but would also mark every nonspam mail too.) Some of the above pages omit this information, so take with a pinch of salt.
news.admin.net-abuse.blocklisting is a newsgroup devoted to discussion of subjects related to the use, administration, and effects of blocklists in ameliorating the problem of unsolicited bulk email and other unwanted or abusive network traffic. It is also accessible through groups.google.com.
Questions And Answers
| Anchor | ||||
|---|---|---|---|---|
|
...
- Yes! In fact, doing this is important to avoid false results from some DNS lists (e.g. DNSWL) if you have a large ISP and, if you're running a busy mailserver, this is essential for efficiency. See CachingNameserver.
Q: Does anybody know of a good way to use the cluecentral.net country lists? I'd like to penalize certain countries from which I get a lot of spam and almost no real mail. I can't seem to get it working with multiple countries.
...