SPAM
 |
||||||||||||||||||||||||
 |
Exploits Block List The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits. Incorporates CBL data, OPM data and NJABL proxy data The XBL wholly incorporates data from three highly-trusted DNSBL sources: - the CBL (Composite Block List) from cbl.abuseat.org - the BOPM (Blitzed Open Proxy Monitor) from opm.blitzed.org - the NJABL open proxy IPs list from www.njabl.org. Mail servers already using cbl.abuseat.org and opm.blitzed.org should NOT also use xbl.spamhaus.org or you will be making 'double' queries to basically the same data source and only one DNSBL will appear to work (the other(s) will appear to not catch anything). Mail servers already using dnsbl.njabl.org are advised to continue doing so, as dnsbl.njabl.org is itself a composite list and contains more than the open proxy IPs list part now incorporated in XBL. For information on CBL see http://cbl.abuseat.org/ For information on OPM see http://opm.blitzed.org/info/ For information on NJABL see http://www.njabl.org/ How To Use the XBL The Exploits Block List can be used by all modern mail servers, by setting your mail server's anti-spam DNSBL feature (sometimes called "Blacklist DNS Servers" or "RBL servers") to query xbl.spamhaus.org. Use of the XBL is free for users with normal mail servers (but networks with high email traffic should see DataFeed). DNSBL Queries
We recommend you use xbl.spamhaus.org together with sbl.spamhaus.org, as the SBL and XBL block different spam sources. To save you having to query two separate DNSBL zones there is a special combined "SBL+XBL" zone, sbl-xbl.spamhaus.org, which contains the complete SBL and XBL data (we recommend you use this combined zone), to use it, simply set your mail server's DNSBL check to query sbl-xbl.spamhaus.org only. Data Feed: Zone Transfers (rsync) for ISPs Internet Service Providers, ESPs and corporate mail services with high email traffic should use Rsync zone transfers of the Spamhaus DNSBLs to a local DNS server on your network. To submit a request for zone transfers see: Data Feed Application Form. Disclosure We ask, but do not require, that all ISPs using the XBL and/or SBL inform customers of the fact you run spam filters (simply because it is the correct thing to do). Use of known-to-be-effective spam blocklists is normally seen as a service advantage and strong sales point. All SBL and XBL Users are welcome to use the "email protected by" SBL and XBL web badges on sites. |
