Composite Blocking List

In computer networking, the Composite Blocking List (CBL) is a DNS-based Blackhole List of suspected E-mail spam sending computer infections.

Overview

The CBL takes its source data from very large spamtraps/mail infrastructures, and only lists IPs exhibiting characteristics such as:

  • Open proxies of various sorts (HTTP, socks, AnalogX, wingate etc.)
  • Worms/viruses/botnets that do their own direct mail transmission, or are otherwise participating in a botnet.
  • Trojan horse or "stealth" spamware.

The CBL attempts to avoid listing real mail servers, but certain misconfigurations of mail servers can make the system appear infected (for example, servers that send HELO with 'localhost' or a similar incorrect domain.)

Entries automatically expire after a period of time.

The CBL does not provide public access to gathered evidence.

CBL data are used in Spamhaus XBL list.

gollark: Modern reverse proxies/webservers (caddy/træfik are the ones I know of) do nice things like configuring SSL/TLS with Let's Encrypt automatically.
gollark: It will? Madness.
gollark: If you try and use it to proxy, I don't know, telnet, it'll not work.
gollark: Isn't HTTP.
gollark: I have nginx as a static file server (for my static-site-generated website), but a few things need to be dynamic, so I forward those URLs to actual backends.

See also
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.