DNSBL


GTAXLnet operates a DNSBL (DNS Blacklist) for primary use for IRC networks and E-Mail servers. Since we operate both, we have our fair share of bad actors and would like to combat this and provide back to the community. There are plenty of DNSBLs out there but their primary focus is e-mail spam. We source IPs from IRC, e-mail, ssh, firewall logs, failed web admin logins, etc. Also unlike many other DNSBLs, we utilize a big anycast network for our nameservers, DNSimple, making our DNSBL more responsive and reliable. Our DNSBL is still rather new, so some of the extraction locations are still under development, but this is a project we are really interested in and will commit even further resources based on demand. Please see below on how to implement our DNSBL into your specific software.


Request Removal

You can request removal by e-mailing gtaxl at gtaxl dot net. Form and lookup tool coming soon.

Partners

The following IRC networks and e-mail servers partner with us to contribute to the GTAXLnet DNSBL.
Want to join? Please contact us at gtaxl at gtaxl dot net and we can give you an API key and scripts for your software.

IRC

HOPM (Hybrid Open Proxy Monitor)

This is the successor to BOPM.
More info here.
blacklist {
    name = "bl.gtaxl.net";
    type = "A record reply";
    ban_unknown = no;
    reply {
        2 = "Listed. See TXT record for reason.";
    };
    kline = "gzline +*@%i 7d Your IP address is listed in the GTAXLnet DNSBL. Please see https://gtaxl.net/dnsbl.html for more info.";
};

UnrealIRCd

More info here.
blacklist GTAXLnet {
    dns {
        name bl.gtaxl.net;
        type record;
        reply { 2; };
    };
    action gzline;
    ban-time 7d;
    reason "Your IP address is listed in the GTAXLnet DNSBL. Please see https://gtaxl.net/dnsbl.html for more info.";
};

InspIRCd

TXT Reason support is in the works.
More info here.
<dnsbl
    name="GTAXLnet"
    domain="bl.gtaxl.net"
    type="record"
    records="2"
    action="zline"
    duration="7d"
    reason="Your IP address is listed in the GTAXLnet DNSBL. Please see https://gtaxl.net/dnsbl.html for more info.">

Anope

We recommend you do this on your IRCd instead.
More info here.
blacklist
    {
        name = "bl.gtaxl.net"
        time = 7d
        2 = "Listed. See TXT record for reason."
        reason = "Your IP address is listed in the GTAXLnet DNSBL. Please see https://gtaxl.net/dnsbl.html for more info."
    }

E-Mail

Postfix

main.cf More info here.
smtpd_recipient_restrictions =
    reject_invalid_hostname,
    reject_unknown_recipient_domain,
    reject_unauth_pipelining,
    permit_sasl_authenticated,
    permit_mynetworks,
    reject_unauth_destination,
    reject_rbl_client bl.gtaxl.net,
    check_policy_service unix:private/policy-spf