DNSBL
GTAXLnet operates a DNSBL (DNS Blacklist) for primary use for IRC networks and E-Mail servers. Since we operate both, we have our fair share of bad actors and would like to combat this and provide back to the community. There are plenty of DNSBLs out there but their primary focus is e-mail spam. We source IPs from IRC, e-mail, ssh, firewall logs, failed web admin logins, etc. Also unlike many other DNSBLs, we utilize a big anycast network for our nameservers, DNSimple, making our DNSBL more responsive and reliable. Our DNSBL is still rather new, so some of the extraction locations are still under development, but this is a project we are really interested in and will commit even further resources based on demand. Please see below on how to implement our DNSBL into your specific software.
We strongly recommend you run a local caching recursor on your server(s) such as pdns-recursor (PowerDNS Recursor) or Unbound!
Request Removal
You can request removal by e-mailing gtaxl at gtaxl dot net. Form and lookup tool coming soon.
Partners
The following IRC networks and e-mail servers partner with us to contribute to the GTAXLnet DNSBL.
Want to join? Please contact us at gtaxl at gtaxl dot net and we can give you an API key and scripts for your software.
IRC
HOPM (Hybrid Open Proxy Monitor)
This is the successor to BOPM.
More info
here.blacklist {
name = "bl.gtaxl.net";
type = "A record reply";
ban_unknown = no;
reply {
2 = "Listed. See TXT record for reason.";
};
kline = "gzline +*@%i 7d Your IP address is listed in the GTAXLnet DNSBL. Please see https://gtaxl.net/dnsbl.html for more info.";
};
UnrealIRCd
More info
here.blacklist GTAXLnet {
dns {
name bl.gtaxl.net;
type record;
reply { 2; };
};
action gzline;
ban-time 7d;
reason "Your IP address is listed in the GTAXLnet DNSBL. Please see https://gtaxl.net/dnsbl.html for more info.";
};
InspIRCd
TXT Reason support is in the works.
More info
here.<dnsbl
name="GTAXLnet"
domain="bl.gtaxl.net"
type="record"
records="2"
action="zline"
duration="7d"
reason="Your IP address is listed in the GTAXLnet DNSBL. Please see https://gtaxl.net/dnsbl.html for more info.">
Anope
We recommend you do this on your IRCd instead.
More info
here.blacklist
{
name = "bl.gtaxl.net"
time = 7d
2 = "Listed. See TXT record for reason."
reason = "Your IP address is listed in the GTAXLnet DNSBL. Please see https://gtaxl.net/dnsbl.html for more info."
}
E-Mail
Postfix
main.cf More info
here.smtpd_recipient_restrictions =
reject_invalid_hostname,
reject_unknown_recipient_domain,
reject_unauth_pipelining,
permit_sasl_authenticated,
permit_mynetworks,
reject_unauth_destination,
reject_rbl_client bl.gtaxl.net,
check_policy_service unix:private/policy-spf