Cisco Cisco Web Security Appliance S360 Guia De Resolução De Problemas
What types of blacklists are used by SenderBase?
Document ID: 118404
Contributed by Scott Roeder and Enrico Werner, Cisco TAC Engineers.
Oct 13, 2014
Contents
Introduction
What types of blacklists are used by SenderBase?
Related Information
What types of blacklists are used by SenderBase?
Related Information
Introduction
This document describes what types of blacklists are used by SenderBase.
What types of blacklists are used by SenderBase?
The SenderBase Reputation Service (SBRS) provides an accurate and flexible way for you to reject or throttle
systems suspected to be transmitting spam based on the connecting IP address of the remote host. The SBRS
returns a score based on the probability that a message from a given source is spam, ranging from −10 (certain
to be spam) through 0 to +10 (certain not to be spam).
systems suspected to be transmitting spam based on the connecting IP address of the remote host. The SBRS
returns a score based on the probability that a message from a given source is spam, ranging from −10 (certain
to be spam) through 0 to +10 (certain not to be spam).
An important component of the SBRS score for any IP address is its presence on other DNS−based blacklists.
SBRS uses over 2 dozen different DNS−based blacklists, weighted in varying ways, to contribute to the SBRS
score. Some of the blacklists, such as SORBS, actually have multiple lists associated with them depending on
why a system was listed in their database. There are other components of the SBRS score, such as level of
complaints about the IP address and mail volume, however the exact components and blacklist weights used
in the SBRS scoring algorithm change over time and are proprietary.
SBRS uses over 2 dozen different DNS−based blacklists, weighted in varying ways, to contribute to the SBRS
score. Some of the blacklists, such as SORBS, actually have multiple lists associated with them depending on
why a system was listed in their database. There are other components of the SBRS score, such as level of
complaints about the IP address and mail volume, however the exact components and blacklist weights used
in the SBRS scoring algorithm change over time and are proprietary.
The main DNS−based blacklist "families" used by SenderBase include:
SpamCop: www.spamcop.net
•
SBL (SpamHaus Blocklist): www.spamhaus.org
•
PBL (Spamhaus Policy Block List)
•
NJABL (Not Just Another Black List): www.njabl.org
•
SORBS (Spam and Open Relay Blocking System: www.sorbs.net
•
OPM (Open Proxy Monitor List): opm.blitzed.org
•
CBL (Composite Blacklist): cbl.abuseat.org
•
RFC−Ignorant: rfc−ignorant.org
•
Five−Ten Blocklist: www.five−ten−sg.com
•
MAPS (Trend Micro DNSBL): www.mail−abuse.com
•
Related Information
SenderBase Frequently Asked Questions
•
Technical Support & Documentation − Cisco Systems
•