Open Backdoor operates a DNSBL (Domain Name Service Blocklist) for use with E-Mail servers and IRC (Internet Relay Chat) networks. Since we operate both, we have our fair share of bad actors and would like to combat this. We operate this DNSBL to not only protect our own infrastructure, but to also provide back to the community. There are plenty of other DNSBLs out there, however their primary focus is on E-Mail spam. We source the IP addresses of bad actors from various sources such as IRC, E-Mail, SSH, firewall logs, failed web admin logins, etc. Also, unlike plenty of other DNSBLs, we utilize an anycast network for our nameservers. This makes our DNSBL more responsive and reliable. Please see below for instructions on how to implement our DNSBL into your specific software.
You can request removal by e-mailing gtaxl at gtaxl dot net. Form and lookup tool coming soon.
The following organizations partner with us to contribute to the Open Backdoor DNSBL.
Want to join? Please contact us at gtaxl at gtaxl dot net and we can give you an API key and scripts for your software.
blacklist {
name = "bl.gtaxl.net";
type = "A record reply";
ban_unknown = no;
reply {
2 = "Listed. See TXT record for reason.";
};
kline = "gzline +*@%i 7d Your IP address is listed in the Open Backdoor DNSBL. Please see https://openbackdoor.com/dnsbl.html#faq for more info.";
};
blacklist OBD {
dns {
name bl.gtaxl.net;
type record;
reply { 2; };
};
action gzline;
ban-time 7d;
reason "Your IP address is listed in the Open Backdoor DNSBL. Please see https://openbackdoor.com/dnsbl.html#faq for more info.";
};
<dnsbl
name="OBD"
domain="bl.gtaxl.net"
type="record"
records="2"
action="zline"
duration="7d"
reason="Your IP address is listed in the Open Backdoor DNSBL. Please see https://openbackdoor.com/dnsbl.html#faq for more info.">
blacklist
{
name = "bl.gtaxl.net"
time = 7d
2 = "Listed. See TXT record for reason."
reason = "Your IP address is listed in the Open Backdoor DNSBL. Please see https://openbackdoor.com/dnsbl.html#faq for more info."
}
smtpd_recipient_restrictions =
reject_invalid_hostname,
reject_unknown_recipient_domain,
reject_unauth_pipelining,
permit_sasl_authenticated,
permit_mynetworks,
reject_unauth_destination,
reject_rbl_client bl.gtaxl.net,
check_policy_service unix:private/policy-spf
DNSBL stands for Domain Name Service Blocklist. It is a blocklist that contains IP addresses participating in malicious activities. A DNSBL is widely used on E-Mail servers to prevent spam from known offenders. However, ours is designed for both E-Mail and IRC (Internet Relay Chat) servers. A DNSBL runs on DNS (Domain Name System), the same technology that powers domain names. Hence its name.
It works a little something like this... blah blah still needs to be completed.
You must appeal... no this section is not done yet. Sorry about that..