GrRBL

What is it?

• Submissions
• Proposed Usage
• Alternate Usage
• Disclaimer

It’s been some months now that I’ve started collecting some IP addresses of well known Greek spammers and I’ve put them on an DNSBL. I’ve named this list GrRBL. The software I use to run the list is rbldnsd.

The list is strictly moderated by me and only me and I try to be very selective on hosts I add to the list. The list contains hosts not only in .gr zone but also “foreign” hosts used to send spam messages either in Greek language or of Greek interest.

There are currently no statistics and no public listing of IPs in the blacklist. If there’s enough demand for statistics I might create some.

There’s also NO automatic deletion support, once an IP is in the list there’s no automatic way out. Since I am the only one adding IPs to the list, I am also the only one removing them, manually of course.

Submissions

See also how you can help GrRBL.

Proposed Usage

Spamassassin

In your local.cf (or so), use the following code:

header          RCVD_IN_GRRBL   eval:check_rbl('grrbl', 'rbl.void.gr')
describe        RCVD_IN_GRRBL   Listed in rbl.void.gr
tflags          RCVD_IN_GRRBL   net
score           RCVD_IN_GRRBL   0 4.0 0 4.0

This will give messages from any ip which is on GrRBL an extra score of four points.

Alternate Usage

Exim

In an Exim ACL, use the following code:

# Block all connections from hosts on GrRBL
deny
     message  = Connection blocked. You are on $dnslist_domain ($dnslist_text)
     dnslists = rbl.void.gr

This will deny messages from any ip which is on GrRBL

Sendmail

Add the following line to your sendmail.mc, rebuild your sendmail.cf and restart sendmail.

FEATURE(`enhdnsbl', `rbl.void.gr', ``Mail from $&{client_addr} rejected, see http://grrbl.void.gr/'',`t')dnl

Postfix

In main.cf, add the following line:

smtpd_recipient_restrictions = reject_rbl_client rbl.void.gr

This will deny messages from any ip which is on GrRBL

Disclaimer

Even though I use GrRBL in all of the mail servers I own/manage, still I consider the service as beta. I don’t think it’s ever going to eat your emails, but you are still the only one responsible if this happens.