[ale] Recommendations for well-maintained IP blacklists?

[splante at insightsys.com (Scott Plante)]

There are certainly some for email. We use ones from: 
http://www.sorbs.net/ 
http://www.spamcop.net/ 
http://www.njabl.org/ 
http://www.spamhaus.org/ 




The way we use them is they act like a DNS server, and you do a lookup on the IP address. You can do this with postfix using the reject_rbl_client directive. I believe some or all of them allow you to download/rsync lists, too. While I picked ones specifically for spam, as I recall they offer various lists, some by country, etc., which may be of use to you. 


Some are lists of just dynamic DNS ranges, like IPs assigned to home internet connections. That's appropriate for blocking email, but not other IP, like ssh or vpn connections. I got those from dnsstuff.com. I used to be a paid member there, but while I like the service I didn't use it enough to justify the ever increasing fees. Still, you might find some other useful info there. 


Scott 

----- Original Message -----

From: "Michael B. Trausch" <mbt at naunetcorp.com> 
To: ale at ale.org 
Sent: Tuesday, December 25, 2012 7:18:31 PM 
Subject: [ale] Recommendations for well-maintained IP blacklists? 

Does anyone here use IP blacklists to drop traffic from known-bad 
sources? And if so, where do you get your well-maintained IP blacklists 
from? 

--- Mike 

_______________________________________________ 
Ale mailing list 
Ale at ale.org 
http://mail.ale.org/mailman/listinfo/ale 
See JOBS, ANNOUNCE and SCHOOLS lists at 
http://mail.ale.org/mailman/listinfo 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20121228/c903a2f3/attachment.html>