GrRBL
RBL and email blacklist against Greek Spam

What is it?

It’s been some months now that I’ve started collecting some IP addresses of well known Greek spammers and I’ve put them on an DNSBL. I’ve named this list GrRBL. The software I use to run the list is rbldnsd.

The list is strictly moderated by me and only me and I try to be very selective on hosts I add to the list. The list contains hosts not only in .gr zone but also “foreign” hosts used to send spam messages either in Greek language or of Greek interest.

There are currently no statistics and no public listing of IPs in the blacklist. If there’s enough demand for statistics I might create some.

There’s also NO automatic deletion support, once an IP is in the list there’s no automatic way out. Since I am the only one adding IPs to the list, I am also the only one removing them, manually of course.

Submissions

See also how you can help GrRBL.

Proposed Usage

Spamassassin

In your local.cf (or so), use the following code:

header          RCVD_IN_GRRBL   eval:check_rbl('grrbl', 'rbl.void.gr')
describe        RCVD_IN_GRRBL   Listed in rbl.void.gr
tflags          RCVD_IN_GRRBL   net
score           RCVD_IN_GRRBL   0 4.0 0 4.0

This will give messages from any ip which is on GrRBL an extra score of four points.

Alternate Usage

Exim

In an Exim ACL, use the following code:

# Block all connections from hosts on GrRBL
deny
     message  = Connection blocked. You are on $dnslist_domain ($dnslist_text)
     dnslists = rbl.void.gr

This will deny messages from any ip which is on GrRBL

Sendmail

Add the following line to your sendmail.mc, rebuild your sendmail.cf and restart sendmail.

FEATURE(`enhdnsbl', `rbl.void.gr', ``Mail from $&{client_addr} rejected, see http://grrbl.void.gr/'',`t')dnl

Postfix

In main.cf, add the following line:

smtpd_recipient_restrictions = reject_rbl_client rbl.void.gr

This will deny messages from any ip which is on GrRBL

pet-project: Greek Spammers Email Addresses Blacklist

GrRBL has now a pet-project, Greek Spammers Email Addresses Blacklist. Apart from collecting IPs over the years, I have also collected e-mail addresses of well-known spammers who send spam messages either in Greek language or of Greek interest. This list is going to be updated every now and then to include verified e-mail addresses. For now this list is placed at:
Updated Monthly:
Greek Spammers Email Addresses Blacklist (GPG signed)
Greek Spammers Email Addresses Blacklist (ready for spamassassin)
Updated Daily:
Greek Spammers Email Addresses Blacklist (ready for spamassassin) .

Usage: The list can be used directly by spamassassin. Just strip the signature and place blacklist.cf at /etc/mail/spamassassin/ and it will include it automagically (after a spamassassin restart).

Disclaimer

Even though I use GrRBL/Greek Spammers Email Addresses Blacklist in all of the mail servers I own/manage, still I consider the service as beta. I don’t think it’s ever going to eat your emails, but you are still the only one responsible if this happens.