Not Just Another Bogus List
There only 3 ways for IP addresses to get listed in the njabl.org dnsbl.
Operating an open relay or proxy
For the purposes of our dnsbl, an open relay is any system that will deliver email to any address from any source. Spammers tend to hunt for these systems, and then dump thousands, sometimes hundreds of thousands of emails into these servers, which they then spend hours or days trying to deliver to sites all over the world. In addition to insecurely configured mail servers, web servers with insecure HTML form to mail gateway CGI scripts can be used as "open relays", as can insecurely configured proxy servers. The bottom line is if a server can be used by any non-authenticated source to send email to any address on the Internet, it qualifies as an open relay and may be added to this dnsbl. See our Methodology page for more information on how we find and determine which systems are open relays.
Being a dial-up port IP or other dynamic address
Rather than hunt for open relays, some spammers will send their email directly from a dial-up account. In general, there's no need for a dial-up user to talk directly to any SMTP server other than that of their own ISP. So we're compiling a list of dial-up port IP ranges, mostly at larger providers where the abuse seems to be the worst, and we add those to the list. We also include any other IP pools that appear to be dynamically assigned as well as NAT pools, since they are effectively dynamic. Open proxies and trojan proxies are so rampant now that a large percentage of 'open proxies' are actually dynamically assigned dial-up, DSL, or cable modem IPs. These users should all be using their own provider's SMTP servers rather than direct-to-MX as is often done with spam.
Operating a system that directly sends out spam (unsolicited, bulk email, usually of a commercial nature) or continually does so on behalf of customers ignoring abuse complaints
You know who these people are...they're the big commercial spammers who swear they got your name from an affiliate or an associate who swears you visited their web site and opted into the "all the spam you can handle" service plan. I don't know where they really get their lists, but judging from the number of bounces generated by "no such user" errors, I'm guessing all these non-existent accounts didn't really opt-in. In extreme cases, when an ISP is hosting spamming customers and either ignoring abuse complaints or refuses to act on complaints, we'll resort to listing the ISP's servers. Occasionally, this is the only way to convince them that they have a problem.
Blacklist Links
| Website: | http://dnsbl.njabl.org |
| Listing Details: | http://www.njabl.org/cgi-bin/lookup.cgi?query= |
| Removal URL: | http://www.njabl.org/remove.html |
| Date Updated: | 2008-04-06 |