dnsbl.net.au Helping you block invalid E-mail

HOME LOOKUP REMOVE SUPPORT GRAPHS REJECTIONS STATUS FAQ TESTING FEEDBACK TYPES LINKS
REGISTER SUBSCRIPTION MEMBERS FIREWALL | pdl orid ahbl wpbl ucepn spews probes spamsites dsbl sorbs |
| t1 | rddn ahrh orrh jwrh | rmst ricn rdts | osrs omrs osps ohps owps owfs | spamhaus ordb |
01 March, 2006

http://www.dnsbl.net.au/apricot2006/
dnsbl.net.au previously known as bl.reynolds.net.au
-----------------------------------------------------

APRICOT 01 March 2006.
----------------------

Stats
-----

website at http://www.dnsbl.net.au/
bl.reynolds.net.au started operating in January, 2002.
dnsbl.net.au has been operating since January, 2004.
commercial subscription model, so users generally avoid using it.
free use to not for profits, and low volume private users.
currently averaging 150 queries per second across all name servers.
10% of all queries result in a positive (listed) response.
uses rbldnsd software, which was written for rbl purposes.
self removal model, so pretty low maintenance.
aggregates data from other rbl's, and incorporates locally derived data also.

Comparisons - Blacklists Compared
---------------------------------

http://www.sdsc.edu/~jeff/spam/cbc.html 11 February 2006
45410 block.blars.org (too aggressive to be widely useful)
41241 t1.dnsbl.net.au
40330 dnsbl.sorbs.net (union of all results)
36391 sbl-xbl.spamhaus.org (union of all results)


Recommendations
---------------

1. ensure all IP address space is correctly covered with reverse DNS.
2. ensure Reverse DNS response actually relates to server or client use.
3. where possible, block port 25 outgoing on dynamically allocated address space.
4. where possible, rate limit port 25 traffic on main mail server pools.
5. if possible, utilise many and various rbl services on all mail servers.
6. monitor rbl listings of your local address space, pro-actively investigate listings.
7. monitor and scan for compromised client machines, disable account if compromised.



18 May, 2005

bl.reynolds.net.au blacklists the entire internet.

We have been asked to pass on the following announcement by Reynolds Technology.

bl.reynolds.net.au was retired in 2003, and announcements made to that effect, in various places where such things are discussed.

As of 18 May, 2005, the decision was taken to re-instate the bl.reynold.net.au service for the sole purpose of BLACKLISTING THE ENTIRE INTERNET.

This rather drastic action was taken, due to the huge number of mail servers still configured to use the now non-functional bl.reynolds.net.au.

Since the RBL DNS service was no longer running (hasn't been since 2003) the mail server making the query, asks over, and over, and over again. At great cost in bandwidth and network resources.

Anyone in any doubt about the size of the bandwidth requirements should have a closer look at this image, which shows a before and after.

If anyone is still using the bl.reynolds.net.au antispam RBL zone, then they will be having major problems, and possibly rejecting all email.

If anyone is aware of anyone still using bl.reynolds.net.au, please contact the system admin person of the server still using bl.reynolds.net.au, and request they stop doing so immediately.

bl.reynolds.net.au is not the first antispam RBL service to use this method to communicate with otherwise anonymous users. Osirusoft did the same things, also back in 2003.

Please do no contact the support peole at Reynolds Technology about this matter. People who do so, will receive another copy of this email.


07 April, 2005

ACA executes search warrant on suspected major spammer in WA

The Australian Communications Authority (ACA) today executed a search warrant on the premises of a Perth-based company as part of an investigation under the federal anti-spam legislation.

The warrant had been issued by the Federal Magistrates Court on the grounds that the ACA reasonably suspected the company of sending tens of millions of unsolicited commercial emails in breach of the Spam Act 2003.

The contents of computer hard disks and other material were seized by ACA inspectors for examination during the search.

The company and its sole director were also issued with formal notices requiring them to produce documents and other information about their activities to the ACA within two weeks.

ACA Acting Chairman Dr Bob Horton said he could not name the company at this time.

"However, the ACA has received reports from members of the public alleging that they have received thousands of unsolicited emails sent by this company," he said. "Further investigations suggested that this was only the tip of the iceberg."

Computer forensics experts from Deloitte Forensics and lawyers from the Australian Government Solicitor assisted the ACA in the execution of the warrant.

link to source press release


04 April, 2005

New zone, for use detecting URL's within spams.

surbl.dnsbl.net.au

This new zone is used to check whether a found URL in an email message, has been reported as being a 'spamvertising' type address.

To use this zone, you will need an email system which can extract url's from the body part of an email, and then do a standard, RHS (Right Hand Side) lookup. Apparently spammassassin does this already.

Our surbl.dnsbl.net.au zone is built entirely from hourly updates of the multi.surbl.org zone file, directly from surbl.org.

Please see www.surbl.org for more details.

One small difference is that we use wildcards, so hostname parts like www and random.garbage.domain.name.com will return postive matches. This will simplify the lookup process, as all you need to do is extract the fully qualified domain name, from the email message in question, and then query that, against surbl.dnsbl.net.au. This differs slightly from the source multi.surbl.org source, in that they do NOT do the wildcard thing, so you first need to remove leading parts, www and random.garbage.

Should be up and live in the next few days.


14 February, 2005

Due to rsync problems between the sorbs and dnsbl databases, we have dropped sorbs from t1.dnsbl.net.au.

We have also 'emptied' out the sorbs.dnsbl.net.au zone table, so that people making queries to it, will not get problems. The only query to sorbs.dnsbl.net.au that return a positive response, is the test ip address, 127.0.0.2

We may re-instate this zone, if a reliable and timely transfer method can be found, but we suspect that may take some time, so don't hold your breath.


22 August, 2004

kaip writes "Internetnews.com has a story of a spammer. The individual sends 60 million spam emails for four days worth of work ..." article

And from that article, some 'cost of spam' calculators.
Computer Mail Services
NetworkWorldFusion
MX Logic.


07 April, 2004

'High Volume Email Deployers' Video


26 January, 2004 (Australia Day)
End Of Life Announcement for bl.reynolds.net.au zones, transferred to dnsbl.net.au

All zones previously published under the bl.reynolds.net.au zone have been transferred to the dnsbl.net.au zone.

All queries to all of the bl.reynolds.net.au zones (will be / have been / are being) reconfigured to answer all queries in the NEGATIVE until 31 March 2004.

From 01 April 2004, all queries to the bl.reynolds.net.au zones will be answered in the POSITIVE. (aka osirusoft method of final communication with end users.)

All users of both the bl.reynolds.net.au and dnsbl.net.au zones are urged to confirm that their setup is configured correctly, to no longer query the bl.reynolds.net.au zones.

Failure to take immediate action may cause interuption to subscriber mail delivery systems, possibly resulting in either email being blocked, or unwanted email being delivered to end users.

All registered users of the dnsbl.net.au zones will be notified by email in the next few days.

Please feel free to distribute this message (in full) far and wide, to as many existing or potential bl.reynolds.net.au users as possible.

The main aggregate list, zone t1.dnsbl.net.au, consists of an aggregate of well maintained data sources, allowing for one query, to obtain the listing status from many other dnsbl services. It currently contains over 2.5 million entries.

While the current hosting arrangements for the dnsbl.net.au zones are quite diverse, we are currently looking for additional hosting partners in the USA and in Europe.

If you are currently using the dnsbl.net.au services under trial subscription mode, we invite you to subscribe via either a paypal subscription, or as per subscription methods details on the website.

Website http://www.dnsbl.net.au/
Subsciption http://www.dnsbl.net.au/subscription/

[ends]


01 December, 2003
Easynet terminate their many blocklists :-(

The easynet blacklists/spamfilters (blackholes.easynet.nl, proxies.blackholes.easynet.nl, dynablock.easynet.nl, spamdomains.blackholes.easynet.nl, and the easynet spamlists) have been discontinued from Dec 1 2003.

dnsbl.net.au used these easynet (formerly wirehub) lists to provide several of our sub zones. Namely endl, enpb, and endn.

Full text of the termination notice can be found here.
full text of easynet termination notice

Thanks Ben, and others at Easynet Abuse dept.


11 November, 2003
http://www.sdsc.edu/~jeff/spam/cbc.html

Well, it finally happened. The aggregate t1 list has made number 1 on the Jeff Makey comparison report.

The t1 totals now exceed both xbl.selwerd.cx and block.blars.org even though Jeff states they 'are too aggressive to be widely useful'.

The t1.dnsbl.net.au service aggregates public dnsbl zones, all containing high quality and well maintained data, and all featuring well documented remove functions.

The result is a large dnsbl zone with 1.8 million entries (and climbing daily), resulting in a very low rate of false positives.

Blacklists Compared - 01 November 2003

11489 (union of most IP zones)
7864 t1.bl.reynolds.net.au
6051 xbl.selwerd.cx
5511 block.blars.org


03 November, 2003
AOL Email Standards - http://postmaster.info.aol.com/guidelines/standards.html

We applaud the publication of these 'Technical Standards for E-mail Delivery' being used by AOL.

Many dnsbl.net.au subscribers already utilise some or all of these policies, in a variety of blocking and filtering methods.


25 September, 2003
DNSBL operators continue to close, due to attacks

blackholes.compu.net closes down

monkeys.com closes down


11 September, 2003
dnsbl.net.au in the news

zdnet - Aussie spam black-list goes to paid subscriptions


10 September, 2003
Firewalling implemented for no.rdns and no.registration

See FIREWALL for more details.

See these GRAPHS for outcomes.


28 August, 2003
osirusoft has gone offline

osirusoft was one of the longer lasting free DNSbl services. Due to repeated and constant attacks on their network, Joe has decided that it is all not worth the pain.

Services were withdrawn, and all responses answered in the POSITIVE, resulting in the entire internet being added onto his DNSbl. This resulted in a rapid reconfiguration of mail servers around the world, to stop using osirusoft, which was what Joe wanted.

This resulted virtually immediately with a corresponding increase in queries to our service, and people switched DNSbl providers.

slashdot.org - Osirusoft Blacklists The World
zdnet story - Osirusoft 'closes doors'


25 August, 2003
Timetable to subscription enforcement project.

The queries per second statistics keep increasing, and the bandwidth demands continue to grow, but few people have bothered to subscribe. Firewall implementation on the dnsbl.net.au system is now unavoidable.

As of today, 25 August, 2003, hosts querying dnsbl.net.au which do not have their reverse DNS setup correctly will be auto firewalled, to prevent their queries being answered, as soon as these hosts are detected. To rectify this, we suggest you implement an adequate reverse DNS response system.

As of 01 September, 2003, the following policies will be implemented:

Networks querying dnsbl.net.au without having registered within the registration system, [REGISTER] will be auto firewalled, to prevent their subsequent queries being answered, as soon as these queries from unregistered hosts are detected.

Networks querying dnsbl.net.au more than 1000 times per day, and not holding any sort of licensing agreeement [SUBSCRIPTION] with dnsbl.net.au, will be firewalled to prevent their subsequent queries being answered. The first 1000 queries per day, will continue to be honoured.

   Searching for entries in dnsbl.net.au - SEARCH

Removing dnsbl.net.au entries - REMOVE

Support Services - SUPPORT

Access to dnsbl.net.au is via a SUBSCRIPTION service.

Nice MRTG Graphs- GRAPHS

Rejection logs for dnsbl.net.au clients, by domain - REJECTION

Statistics on top rejections for dnsbl.net.au - STATS

dnsbl.net.au Scanning Server Queue Status - QUEUE

dnsbl.net.au Services Status - STATUS

Frequently Asked Questions - FAQ

About our auto - TESTING

Feedback from people, good and bad (we may publish what you send) - FEEDBACK

dnsbl.net.au has identified three DNSbl zone TYPES.

There are so many DNSBL links and resources, they needed their own LINKS page.


WARNING!!!!!
What happens to your email system, after our protection system firewalls your dnsbl.net.au querying server is COMPLETELY BEYOND OUR CONTROL!!!!
Email systems relying upon a timely response to DNS queries to dnsbl.net.au may timeout, delay email, or even prevent email delivery entirely.
Please, if you do not understand this warning, cease using dnsbl.net.au services immediately, and consult your local technical support people.

Please consider donating
or subscribing
Since starting our graphs in June, 2003, in 2 months, the volumes have more than doubled.

We will have to enforce subscription policies, if the funds don't arrive to pay for the bandwidth.



dnsbl.net.au abuse [at] dnsbl [dot] net [dot] au