Blacklists/Blocklists

Blacklists or Blocklists are lists of IP addresses, domain names, email addresses or content of the headers or the body of email addresses (or some combination of these different types) that can be used to help identify spam. A special subset of IP address and domain name lists exist which can be queried using DNS, which are called DNS Blackhole Lists or DNSBLs.

These blacklists can be unverified and cause "collateral damage"; their criteria for listing may not be clear. Read Filter > Server Side > Objections
See People > Pro Spam for more information on individual spammers.

IPs
Domains
IPs and Domains
IPs, Domains, Emails
Emails and Domains
Content Filters
Other Lists

SpamArrest Boycott

IP addresses

These list by IP address alone. They vary hugely in format, from sendmail access.db to plain text lists.
DNS Blackhole Lists (DNSBLs) are a special case of IP address lists which can be queried using DNS.

http://www.spews.org/spews_blocks.txt, http://www.spews.org/spews_list_level1.txt, http://www.spews.org/spews_list_level2.txt (not to be used for blocking) (Mirror: http://mirror.bliab.com/spews/)
Mirrors of data from various DNSBLs: http://mirror.bliab.com/
Mirrors of data from various DNSBLs: http://spfilter.openrbl.org/data/
http://unityhill.com/blacklist/
http://users.erols.com/abuse/block4.html
http://web.greens.org/etc/r.txt
http://www.maney.org/uce/sendmail/deny.ip and http://www.maney.org/uce/sendmail/deny.ip-range
http://support.easystreet.com/abuse/banned_ip.html
http://www.dayo.net/spam.htm
http://info.webtv.net/spam/
http://www.krusty-motorsports.com/blocked-by-ip.html
http://www.panix.com/~spamdesk/
http://www.pc-gamereview.com/refuse.txt
http://www.korenwolf.net/rbl/blocked_networks
http://www.rts.com.au/spam/access.new (Sendmail access list)
http://www.vortex.com/blocklist-s.txt (See http://www.vortex.com/mailblock.html)
http://www.onet.on.ca/Technical.References/rc.antispam (Route config)
http://utcc.utoronto.ca/abuse/antispam-stuff/rc.ipacl (Route config)
http://www.vortex.com/blocklist.txt (TCPd format, see http://www.vortex.com/mailblock.html)
http://www.wsrcc.com/spam/client_access.txt
http://www.taz.net.au/Mail/SpamNets
http://www.okean.com/asianspamblocks.html
http://www.smnolde.com:7080/exim/LARTed
http://tools.rosinstrument.com/proxy/ (open proxies)
http://www.the-foxhole.org/verio.txt (Verio, Mercury Mailer format)
http://www.the-foxhole.org/block.htm
http://mercury.asuka.ne.jp/filters/reject_client (mainly Japanese ranges)
http://www.cs.uu.nl/technical/services/email/SPAMclients.php
http://killaspammerforchrist.com/newedge/block.txt
http://www.mcgath.com/evilip.txt
http://mailwww.cern.ch/spam/IPBadBoys.html (homepage)
http://georgi.unixsol.org/programs/spam-filters/tcp.smtp.2002-07-15
http://www.stanford.edu/group/itss-ccs/security/filters.html
http://www.kr.freebsd.org/internal/spam/kfug/denyip
http://www.theorem.com/spam/openservers.htm (open relay list)
http://www.panix.com/~spamdesk/ (by country)
http://mailer.humboldt.net/cgi-bin/rules2html
http://www.spamfiltered.com/spammersipaddresscurrent.txt
http://www.kendryl.net/downloads/tcp.smtp.txt
http://www.afp548.com/Articles/mail/bigiplist
http://140.111.1.22/tanet/spam.html

[top] [index]

Domains

Generally a single-line record list of domains. Some give reasons, some don't - be wary of using a list like that.
You may also block by domain by using a form of DNSBL called a Right-hand Side Blackhole List, or RHSBL.

http://www.arachnoid.com/lutusp/antispam/spamdomains.txt
http://www.monkeys.com/bandwidth-pigs/ (Sites who won't take 5xx as an answer)
http://www.honet.com/Nadine/Envelope-Senders.htm
http://www.maney.org/uce/sendmail/deny.domain
http://support.easystreet.com/abuse/banned_domains.html
http://www.spamhaus.org/spamdomains.lasso
http://www.xyz.com/spam/spammers.txt
http://www.sandes.dk/abusers/permdeny.txt
http://www.cluelessmailers.org/listings/blacklistbydomain.html
http://www.thecapitol.net/Privacy/spam.html
http://lonestar.texas.net/helpdesk/spamfilter.html
http://www.ezl.com/satisfaction.shtml
http://www.weasel.com/hack.html
http://www.rhyolite.com/anti-spam/freemail.html
http://www.rhyolite.com/anti-spam/spammers.html
http://www.fuhr.org/~mfuhr/spam-filters/procmailrc-spam-domains
http://solutions.icobb.com/blocked_spammers.html
http://www.pris.bc.ca/pris/prisinfo/aboutsys/spam.html
http://home.iae.nl/users/evoncken/spam/HallOfShame.html (http://home.iae.nl/users/evoncken/spam/HallOfShame.txt)
http://www.znet.com/blocked-domains.html (Spite listings - be careful.)
http://www.taz.net.au/Mail/SpamDomains
http://www.smnolde.com:7080/exim/spammers
http://www.sdsc.edu/~jeff/spam/dialup_zones.txt (Dialup domains)
http://www.sengir.demon.co.uk/isp/ (blackness rating)
http://www.benjammin.net/www/pages/home/cgi-bin/spam-list
http://www.cart00ney.org/blocklist.txt (see http://www.cart00ney.org/)
http://www.g-net.net/blacklist.shtml
http://www.alia.ie/finalstraw/spamdomains.html
http://www.er6.eng.ohio-state.edu/htbin/list_pmdf_mapping/end_users,spam_sources
http://www.mcgath.com/rogues.html
http://www.hostasaurus.com/spamblock.php
http://www.mcgath.com/rogues.html
http://mailwww.cern.ch/spam/SpamDomains.html (homepage)
http://krypton.blackplasma.net/postfixaccess
http://www.innernet.net/services/spamshield-blacklist.asp
http://www.linuxgod.net/~jd/access.txt
http://cc-www.uia.ac.be/cc/SpamDomains
http://www.corbettconsulting.com/spam.html
http://www.carl.net/spam/access.txt
http://users.binary.net/dturley/procmail/spammers.txt (see http://users.binary.net/dturley/)
http://www.tls.cena.fr/~boubaker/JunkTrap/domains.blacklist
http://www.wamsoft.co.jp/mailinfo.htm
http://www.shrednow.com/spamcrime/spammerlist.html
http://mail.bruchsal-net.de/spam.html
http://www.rsiegler.org/spammers/
http://www.roestock.demon.co.uk/emailfilter/domain.txt
http://www.myelin.co.nz/data/refererBlacklist.txt (to block web-log "referrer spamming")
http://www.ozetechnology.com/spam_blocks.shtml
http://cc-www.uia.ac.be/cc/SpamDomains (http://cc-www.uia.ac.be/cc/spam_sender.html)
http://www.yale.edu/email/helpdocs/domains.html
http://www.excaltech.com/files/BlockedAddresses.pdf
http://www.shrednow.com/spamcrime/spammerlist.html
http://www.raymer.org/personal/blacklist/
http://obob.manilasites.com/OriginalList, http://obob.manilasites.com/UpdatesList
http://www.datawise.net/black.txt
http://www.pris.bc.ca/pris/prisinfo/aboutsys/spam.html
http://www.galtham.org/misc/sites, http://www.galtham.org/misc/sites2
http://www.ott.net/procmail-filters/spamdomains.procmail
http://www.elitesecurity.org/tema/11220.txt
http://www.mgul.ac.ru/~t-alex/Linux/item/baddomains.txt

[top] [index]

IPs and Domains

A mix of both IP and domain name blacklists.

https://bigmama.rhoen.de/rhoenmisc/rhoenspam.php
http://www.plethora.net/resources/antispam/banlist
http://hermes-grp.com/spammers/
http://bl.mynsdap.com/
http://www2.zzapp.org/forms/spamlist.htm
http://email.ucdavis.edu/spam/blocked.html
http://www.king.igs.net/information/spam/blocked.html
http://www.wsrcc.com/spam/client_access.txt
http://woozle.org/stats/shitcan.txt
http://www.gta.igs.net/information/spam/blocked.html
http://www.mesoscale.iastate.edu/spam/access
http://www.channel1.com/support/spammers
http://www.linux-tech.com/badmailfrom.html
http://utcc.utoronto.ca/abuse/antispam-stuff/hosts.deny-smtp
http://www2.yo-linux.com/cgi-bin/mail-access
http://electriceye.net/banned/
http://www.srkconsulting.com/access/
http://www.hawaii.edu/its/email/spamrelay.html
http://www.aspectdesignz.com/bannediplist.html
http://www.mesoscale.iastate.edu/spam/access
http://www.oicu812.com/spam/
http://www.spamlist.org/html/the_list.html
http://www.wody.info/spam.txt
http://www.hayholt.org/index.php?action=spam
http://slycer.org/access
http://www.unixhub.com/block.html
http://www.voids.org/spam/email_spammers.txt
http://www.uni-landau.de/~rzlandau/sonstiges/access
http://knackered.knackered.org/angus/blocked.html
http://www.bf.jcu.cz/aktual/spamlist.txt

[top] [index]

IPs, Domains and Email Addresses

Useful if you're doing a full-text filter of your spam headers.

http://www.clifto.com/boycottlist
http://www.rts.com.au/spam/antispam.php3
http://www.oit.duke.edu/sa/antispam/blockedmail.html
http://www.detritus.org/spam/spammers.txt
http://www.uni-koeln.de/rrzk/uklan/sendmail/junk-domain.txt
http://ist.uwaterloo.ca/~reggers/spammers/spammers
http://sundry.eng.intersil.com/users/john/spam/spammers.txt
http://www.etherlabs.net/tools/spammers.php
http://nitwit.com/spam/spammers.txt
http://www.3dmail.com/blocklist/blocklistsorted.txt
http://www.saabnet.com/tsn/spam.html
http://sundry.eng.intersil.com/users/john/spam/spammers.txt
http://nitwit.com/spam/spammers.txt
http://www.sfsu.edu/~helpdesk/docs/internet/reject.html
http://www.urz.uni-heidelberg.de/Netzdienste/firewall/access
http://cosmo.slique.net/~vikrum/skunkworks/misc/sht/sht.access (see http://cosmo.slique.net/~vikrum/skunkworks/misc/sht/)
http://www.halleluiah.com/spammerlist.htm
http://web.thetransmission.net:8081/SPAMoof/
http://www.brtnet.org/blocked.txt
http://www.markwelch.com/welch_filters.htm
http://fairyweb.com/bill/Spam.html
http://www.toastedspam.com/denylist
http://www.medtechnet.com/smtpd.txt
http://www.firstbase.com/blocklist.htm
http://www.spambroken.com/showbl.php
http://www.west-point.org/publications/access.txt
http://www.dvs.org/post/impospam.html
http://www.scn.rain.com/pub/network/anti-spam/SPAM

[top] [index]

Email Address or Domain (Mailfrom)

To block based on the envelope sender in an SMTP session. Can be very unreliable, if you are too specific.

http://www.arachnoid.com/lutusp/antispam/spammers.txt
http://perso.magic.fr/roumazeilles/users.htm
http://www.isp.cc/better-ethics-online/blacklist.htm
http://www.maney.org/uce/sendmail/deny.user
http://www.geocities.com/CapitolHill/1451/table.html
http://www.gaznet.au.com/spam/download.htm
http://www.nirvanaclub.com/news/spammers.txt
http://www.onet.on.ca/Technical.References/access
http://www.krusty-motorsports.com/blocked-by-name.html (http://www.krusty-motorsports.com/sender_reject - For Exim)
http://www.sandes.dk/abusers/tmpdeny.txt
http://www.taz.net.au/Mail/SpamDomains
http://www.rhyolite.com/anti-spam/dict-attack.html
http://basic.wirehub.nl/spamlist.txt, http://basic.wirehub.nl/spamlist-extended.txt (usage: http://basic.wirehub.nl/spamlist-usage.html)
http://www.csd.uwo.ca/cgi-bin/magi/spamset
http://www.caspam.org/cas_blacklist.php
http://www.nyx.net/~shrao/spammers.shtml
http://www.ari.net/blacklist.txt (see http://www.ari.net/spam.html)
http://www.taz.net.au/Mail/Spammers
http://www.xs4all.nl/~lancelot/spam/btamail_dropboxes.html
http://members.tripod.com/dale_forsyth/spam.zip
http://www.dr-lex.34sp.com/info-stuff/spammers.html
http://mercury.asuka.ne.jp/filters/reject_sender
http://members.socialreject.net/cpanel/cpanel.asp?blackhole
http://www.er6.eng.ohio-state.edu/htbin/list_pmdf_mapping/env_from_spam
http://abuse.dragnet.com.au/spam_database.php
http://www.toastedspam.com/denylist
http://mailwww.cern.ch/spam/Spammer.html (homepage)
http://georgi.unixsol.org/programs/spam-filters/badmailfrom (and http://georgi.unixsol.org/programs/spam-filters/badmailpatterns)
http://www.i5net.net/stop_spam.htm
http://www.imagefxonline.net/apps/sf/kill.txt
http://www.blackwolf.com/blacklist
http://www.parts-unknown.org/greybeard95a/badmailfrom
http://www.securitysage.com/files/access
http://www.kr.freebsd.org/internal/spam/kfug/spamsites
http://www.honet.com/Nadine/Envelope-Senders.htm (mirror: 1)
http://www.tls.cena.fr/~boubaker/JunkTrap/addresses.blacklist
http://arrow.yak.net/access.txt
http://www.math.fu-berlin.de/~guckes/setup/spamassassin-user_prefs
http://www.tech2u.com.au/member/banned_list.html
http://www.voytech.com/anti_spam.htm
http://mail.dep.ufscar.br/spam/bloqueados
http://www.w5hq.com/MailWasher/Blacklist.txt
http://www.roestock.demon.co.uk/emailfilter/emails.txt
http://www.stearns.org/sa-blacklist/
http://cc-www.uia.ac.be/cc/Spammer (http://cc-www.uia.ac.be/cc/spam_sender.html)
http://www.meicon.at/spammers.html
http://www.hiemalis.org/rental/badmailfrom.html
http://www.firstbase.com/blocklist.htm
http://www2.hunter.com/~skh/spam/spamlists/bozos
http://www.econ.ucl.ac.be/Dupriez/junk.txt
http://linetap.com/linetaphelp/Ourspamlist.htm

Whitelist: http://www.rhyolite.com/anti-spam/dcc/dcc-tree/homedir/whitecommon

[top] [index]

Content Filters

Content Filters are a method of using characteristics of the content of spam in order to filter spam.

Procmail Filters

These filters can be used directly with Procmail, and are a special case of content filtering.
Users of different packages might still find these useful.

For procmail recipes used in conjunction with other applications see:
Filter > Client Side > UNIX > Procmail

http://www.igs.net/~rleir/dot_procmailrc.html
http://www.leto.net/configs/procmailrc
http://www.telebyte.com/stopspam/
http://www.uwasa.fi/~ts/info/proctips.html#spam
http://www.claws-and-paws.com/spam/procmail_antispam_recipe.txt
http://www.maney.org/uce/procmail/filters/
http://rut.org/nospam/
http://www.xs4all.nl/~sister/procmailrc
http://www.city-fan.org/ftp/contrib/mail/spamfilter/spamcheckrc
http://users.binary.net/dturley/procmail/dot_procmailrc.txt (see http://users.binary.net/dturley/)
http://www.eskimo.com/~parents/filter/jon1
http://www.linuxbrit.co.uk/downloads/dot.procmailrc
http://spacepants.org/conf/dot.procmailrc
http://www.insanityunlimited.com/projects/procmail/chop-contents
http://tril.tunes.org/dot-pmrc-spam
http://www.dotfiles.com/index.php3?app_id=12
http://www.iegrec.org/procmailrc.html
http://sblug.com/minutes/procmail/rc.nospam.txt
http://wolfram.schlich.org/linux/home/wschlich/dot.procmailrc
http://pachome1.pacific.net.sg/~sutrisno/rcfile/procmailrc
http://the-infinite.org/archive/docs/procmail/rc.pre-list
http://www.symonds.net/~prahladv/files/procmailrc
http://piology.org/.procmailrc.html
http://www.freax.eu.org/files/public_mailfilterrc.txt
http://www.astro.bas.bg/procmail.html
http://www.ram.org/ramblings/philosophy/spam/rams_dot_procmailrc