Which RBL's do you use?

[hostseeker]

Since I stopped using MailScanner and went solely to using the RBL's to block spam I have been very happy! A lot less server load, plus the spam is blocked just as efficiently or maybe more than MailScanner.

I was wondering what RBL's everyone uses?

Currently I use:

sbl-xbl.spamhaus.org
bl.spamcop.net
dnsbl.njabl.org
dnsbl.sorbs.net

[HostMerit]

I wouldn't suggest:

dnsbl.sorbs.net

As it will block many legit users of your sites. I reside on Comcast PRO cable, and adding that immediately caused a test email to be blocked becuase I was on a dynamic (Comcast cable) IP. So unless your customers send mail from static Ips, which is less than 25% probably less than 15%, the rest will be blocked.

[haze]

We use the following with great success:

sbl-xbl.spamhaus.org
bl.spamcop.net
relays.ordb.org
list.dsbl.org

We've trialed and trialed and trialed them all.. the above have proven the most successfull and least negative in regards to lost legitimate email out of any of the ones we've tried.

I've heard rumors that sbl-xbl.spamhaus.org incorporate bl.spamcop.net ( whould be great and would help reduce lookups on our servers ) though i've not been able to confirm this myself.

[hostseeker]

Thanks, good to know, I will stop using dnsbl.sorbs.net

I wouldn't suggest:

dnsbl.sorbs.net

As it will block many legit users of your sites. I reside on Comcast PRO cable, and adding that immediately caused a test email to be blocked becuase I was on a dynamic (Comcast cable) IP. So unless your customers send mail from static Ips, which is less than 25% probably less than 15%, the rest will be blocked.

[hostseeker]

Okay I am going to try your exact list!

I don't think bl.spamcop.net is currently incorporated within sbl-xbl.spamhaus.org because viewing the logs I still see bl.spamcop.net listed AFTER the IP had been looked up at sbl-xbl.spamhaus.org and was not found there.

We use the following with great success:

sbl-xbl.spamhaus.org
bl.spamcop.net
relays.ordb.org
list.dsbl.org

We've trialed and trialed and trialed them all.. the above have proven the most successfull and least negative in regards to lost legitimate email out of any of the ones we've tried.

I've heard rumors that sbl-xbl.spamhaus.org incorporate bl.spamcop.net ( whould be great and would help reduce lookups on our servers ) though i've not been able to confirm this myself.

[K_aneda]

Stopped using RBLs here, purely out of reason as some of the network blocks are never reinvestigated - banned all of Telstra (Australia)'s business ISDN customers and cut out some of our people. Quite nasty. We've reinvested back into clamav and spamassassin as first line of defence.

[haze]

That happens, it pays to research and investigate what sort of criteria is required before hand for the list. We've been through the same ordeal however the above listed ones i mentioned have been absolutely great with that respect.

[K_aneda]

Too time intensive going through the RBL lists to find out they blocked your customers - they'll only report it when they feel like it, otherwise they get fed up and flee

[K_aneda]

Oops what I meant to say is that they're not sane enough for my liking

[hostseeker]

Anyone use cbl.abuseat.org or have any comments about it?

[easyhoster1]

Anyone use cbl.abuseat.org or have any comments about it?

Yes, we do and it works great and never had anyone complain about them.

[haze]

Anyone use cbl.abuseat.org or have any comments about it?

If you're using sbl-xbl.spamhaus.org then that above list is already in use as its combined into either sbl or xbl.. can't remember.

[hostseeker]

If you're using sbl-xbl.spamhaus.org then that above list is already in use as its combined into either sbl or xbl.. can't remember.

You may be right, however I have received spam and looked the IP up in the sbl-xbl.spamhaus.org list and it wasn't there. However the offending IP was listed in cbl.abuseat.org, so that's why I am asking if there have been any problems or comlaints with it.

[projectandrew]

From http://www.spamhaus.org/xbl/index.lasso:

"We recommend you use xbl.spamhaus.org together with sbl.spamhaus.org, as the SBL and XBL block different spam sources. To save you having to query two separate DNSBL zones there is a special combined "SBL+XBL" zone, sbl-xbl.spamhaus.org, which contains the complete SBL and XBL data (we recommend you use this combined zone), to use it, simply set your mail server's DNSBL check to query sbl-xbl.spamhaus.org only."

[hostseeker]

From http://www.spamhaus.org/xbl/index.lasso:

"We recommend you use xbl.spamhaus.org together with sbl.spamhaus.org, as the SBL and XBL block different spam sources. To save you having to query two separate DNSBL zones there is a special combined "SBL+XBL" zone, sbl-xbl.spamhaus.org, which contains the complete SBL and XBL data (we recommend you use this combined zone), to use it, simply set your mail server's DNSBL check to query sbl-xbl.spamhaus.org only."

I also found the below quote on this page:
http://www.spamhaus.org/xbl/

"The XBL wholly incorporates data from two highly-trusted DNSBLs, the CBL (Composite Block List) from cbl.abuseat.org, and the Blitzed Open Proxy Monitor from opm.blitzed.org, therefore mail servers already using cbl.abuseat.org and opm.blitzed.org should NOT also use xbl.spamhaus.org or you will be making 'double' queries to basically the same data source and only one DNSBL will appear to work, the other(s) will appear to not catch anything. For additional FAQs and information on the CBL see http://cbl.abuseat.org/. For information on OPM see http://opm.blitzed.org/info"

However no matter what the above says I still have found spammer IP's in the cbl.abuseat.org that were not in either XBL or SBL at spamhaus.org.

The way I found them was a small amount of spam got through my RBL's so I looked them up to see if they were in any lists. The only lists I found them on was cbl.abuseat.org.