Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

blacklists, whitelist from China -- documentation?

337 views
Skip to first unread message

totojepast

unread,
Mar 2, 2007, 2:22:46 PM3/2/07
to
I am currently testing the following IP blacklists running in China.
They have been established by an official Chinese authority and they
seem to be able to catch some spam. However, I have been unable to
find any official documentation (blacklisting policy, response codes
etc.) in English. Has anybody had any experience with them?

The blacklists:
- cbl.anti-spam.org.cn
- cblplus.anti-spam.org.cn
- cblless.anti-spam.org.cn

The whitelist:
cml.anti-spam.org.cn

--
Comments posted to news.admin.net-abuse.blocklisting
are solely the responsibility of their author. Please
read the news.admin.net-abuse.blocklisting FAQ at
http://www.blocklisting.com/faq.html before posting.

Jem Berkes

unread,
Mar 3, 2007, 9:06:38 AM3/3/07
to
"totojepast" <totoj...@razdva.cz> wrote in news:1172843342.277125.310950
@j27g2000cwj.googlegroups.com:

> I am currently testing the following IP blacklists running in China.
> They have been established by an official Chinese authority and they
> seem to be able to catch some spam. However, I have been unable to
> find any official documentation (blacklisting policy, response codes
> etc.) in English. Has anybody had any experience with them?
>
> The blacklists:
> - cbl.anti-spam.org.cn
> - cblplus.anti-spam.org.cn
> - cblless.anti-spam.org.cn
>
> The whitelist:
> cml.anti-spam.org.cn


I'm sure it's obvious but I would like to remind everyone, it's probably a
very bad idea to use a blocklist whose policy you don't know or understand.
Without a description in English, I have no idea who runs this blocklist,
what it's supposed to do, or if it's appropriate for me to use.

CBL is also arguably a bad choice for their blocklist name.

huey.c...@gmail.com

unread,
Mar 3, 2007, 5:44:22 PM3/3/07
to
Jem Berkes <j...@users.pc9.org> wrote:

> "totojepast" <totoj...@razdva.cz> wrote:
> > I am currently testing the following IP blacklists running in China.
> > They have been established by an official Chinese authority and they
> > seem to be able to catch some spam. However, I have been unable to
> > find any official documentation (blacklisting policy, response codes
> > etc.) in English. Has anybody had any experience with them?
> > The blacklists:
> > - cbl.anti-spam.org.cn
> > - cblplus.anti-spam.org.cn
> > - cblless.anti-spam.org.cn
> > The whitelist:
> > cml.anti-spam.org.cn
> I'm sure it's obvious but I would like to remind everyone, it's
> probably a very bad idea to use a blocklist whose policy you don't
> know or understand.

Perhaps the OP means 'testing' in the sense of "atttempting to determine
what it is they contain", rather than "seeing how it does against a live
mail stream"? The former would make sense. The latter, I'm forced to
agree with you is probably a terribly bad idea.

> Without a description in English, I have no idea who runs this
> blocklist, what it's supposed to do, or if it's appropriate for me
> to use.

That'd be a good capsule description of WHY it'd be a terribly bad idea.

> CBL is also arguably a bad choice for their blocklist name.

Oh, I dunno. If it's a mirror of the CBL, that would seem to be
the obvious name for it. If it's just the "China Block List", that'd
still be descriptive, although I'd be willing to bet that the CBL team
behind cbl.abuseat.org will probably not appreciate the invariable
confusion and "please delist me!" requests that will no doubt ensue.

--
Huey

Chris Lewis

unread,
Mar 8, 2007, 11:59:35 AM3/8/07
to
According to <huey.c...@gmail.com>:

> > CBL is also arguably a bad choice for their blocklist name.

> Oh, I dunno. If it's a mirror of the CBL, that would seem to be
> the obvious name for it.

It's not as far as I can tell. We don't use/query those lists,
but, I've almost never seen a collision between it and the CBL on
www.dnsstuff.com

These are known as "CASA-<something>" (where "something" is "CBL",
"CBL+", "CBL-" and "CDL") on www.dnsstuff.com, with a link
to http://anti-spam.org.cn/. This page has a stylized "CASA" on it
plus "My CASA", but as it's all chinese, I haven't a clue what the
page actually says.

If there's someone here who can read chinese, it'd be interesting
to know the gist of what these lists are.
--
Chris Lewis,

Age and Treachery will Triumph over Youth and Skill
It's not just anyone who gets a Starship Cruiser class named after them.

E-Mail Sent to this address will be added to the BlackLists

unread,
Mar 8, 2007, 3:26:23 PM3/8/07
to
Chris Lewis wrote:
> anti-spam.org.cn ... as it's all chinese, I haven't a

> clue what the page actually says.
> If there's someone here who can read chinese, it'd be
> interesting to know the gist of what these lists are.

icky transliteration follows,


Anti-spam service
Real-time blacklist (RBL) -- CBL/CDL/CBL+/CBL-
Real-time DNS blacklist (RBL) consists of four key
components : CBL, and CBL+ CDL, CBL-.
CBL recently in China include the main source of spam sent.
CDL contain China dynamic address allocation.
CBL+ CBL and CDL for the Collection.
Apart from China is going CBL- CBL+ mail service operators
white list (CML) after the contents of the blacklist.
The blacklist is not very convenient to use real-time
blacklist and in any case we have to ensure that they
are able to receive mail users.
CBL/CDL/CBL+/CBL- and technical details on the specific
situation, please refer to the relevant information they
belong.

White list included verification inquiry -- CML
China mail service operators white list (CML) mainly as a
useful supplement to CBL/CBL+.
As part of the mail service operators to standardize the
services, active or passive, to some service operators
as a source of spam cases.
CBL lead to the inclusion of IP addresses and CBL+ China.
CML,Concerning the use of our services in view of the mail
server may need to unconditionally receive mail from these
operators , we have introduced a CML, including the
operation of China's major commercial outsourcing mail
address.

* another page on "Real-time blacklist (RBL) -- CBL/CDL/CBL+/CBL-"

Real-time blacklist (RBL) -- CBL/CDL/CBL+/CBL-
China launched the anti-spam blacklist services Union is
divided into four parts : CBL, and CBL+ CDL, CBL-
There is also a real-time white list : CML.
Use a reminder before CBL/CDL/CBL+/CBL-
Concerning the application of several typical mail server
setting methods
Check log
Check server status

CBL -- China spam blacklist is the collection and analysis
and review of the current spam source The address malicious
or unintentional source of spam from the spam mail is a
strong possibility.
CBL Spam mainly on China's domestic situation as a selection
of domestic spam blacklist addresses mainly feedback.
It can be said that some of RBL servers abroad more than
CBL suited to the conditions of China.
The CBL will address the occurrence of spam addresses
(frequency, etc.) to maintain the limitation on the blacklist.
If you find that you have been included in the address of the
CBL, please contact us in advance to withdraw from the blacklist.
To protect the operator and major mail newsletter of CBL/CBL+/CBL-
included in the conditions we had to change.
Currently CBL/CBL+/CBL- automatically excluded from the main mail
operators of IP addresses (IP address these CML is a major part).

CDL -- Dynamic Address table is the collection of statistics in
China (including Taiwan) dynamic allocation address.
According to Internet practices, which addresses the dynamic
allocation (including dial-up, ADSL/ISDN dials Dynamic Broadband
Access, etc.) is usually used to provide users with an Internet
access function The mail server is not as a direct function of
the collection and delivery of mail.
Moreover, with access to lower cost, more and more spam senders
into dynamic way to send spam addresses. This means not only
low-cost but also better to avoid blocking and tracing.
Therefore, we believe that it is a dynamic source mail addresses
of the judgment, it can effectively reduce the amount of spam.
Given the surfeit of domestic ISPs dynamic addresses, but when
the changes. We welcome anyone to the CDL us to provide more
accurate data, we corrected the erroneous data.
Dynamic Access addresses of the users should be provided by
the service providers use mail server to send and receive mail.
Application of Foxmail and should avoid the use of direct mail
functions similar to a letter (domestic software is intended
to send a lot of spam with the direct mail sent out spam),
in order to avoid the use of the mail server rejected the CDL
mail.
CDL application of the mail server that require attention.
CDL dynamic addresses may contain the address of your dial-up
Internet access it is often necessary to provide your mail server
or SMTP Authentication first to allow the "local network" linking,
CDL and then conduct inspections to avoid using their own mail
server you can write.

CBL is CBL+ -- Collation and the CDL, CBL and CDL spam targeted
at different situations, users can choose either one use or use.
CBL and CDL if you need to use, you can use the CBL and CDL
Collation CBL+, CBL and CDL application rather than separately.

CBL- -- is to eliminate all the CBL+ CML but we need to address
the need in any case have received mail operators to large mail
users We provide CBL-, it is going from CBL+ addition to that
part of the contents of CML.
Belong to the CBL, CDL and CBL+, CBL- are open, no application
can be used on its own server configuration. The distribution
of the different mail servers to use them, please refer to the
paper below, belong to the more technical details please refer
to the real-time blacklist technology.

As the website is offering a free service does not provide
business security, in order to avoid legal disputes. Before
you agree to use CBL/CDL/CBL+/CBL- belong to the "terms of
service", the following are the terms that need to focus
the attention of some but not limited to :

3) to amend the terms of service and service Amendment
ANTI-SPAM.ORG.CN right to amend the terms of service when
necessary, ANTI-SPAM.ORG.CN service in the event of changes
will be important in the pages suggested revisions.
If we do not agree to change the content, users can take
the initiative to revoke the network services.
If users can continue to enjoy Internet services, it is
deemed to have accepted the terms of service changes.
ANTI-SPAM.ORG.CN retained or amended at any time without
service interruption It must be realized as users.
ANTI-SPAM.ORG.CN exercise of the right to amend or
suspend services without charge to the user or a third party.

6) Refusal to provide security
Users of network services and the use of personal risk.
ANTI-SPAM.ORG.CN this is not any type of guarantee,
whether explicit or implied. However, the implied
commercial not guarantee a specific purpose and not
violating the provisions for appropriate security
restrictions.
ANTI-SPAM.ORG.CN security services will not meet the
user's requirements no one can guarantee that
service will not be interrupted, the timeliness of
service, safety, and that mistakes do not occur secured.
ANTI-SPAM.ORG.CN to be in any ANTI-SPAM.ORG.CN Commodities
shopping service or transaction process is not guaranteed.

7), a limited liability
ANTI-SPAM.ORG.CN for any direct, indirect, incidental,
Following the irresponsible and damaging the special
effect, which may damage from the improper use of the
network : service purchased on-line for the same type
of goods or services, on-line transactions illegal use
of the transmission network or user information changes.
ANTI-SPAM.ORG.CN these acts may cause damage to the image.
So ANTI-SPAM.ORG.CN prior to the possibility of such damage.


Concerning the application of several typical of the mail server
installed : CBL/CDL/CBL+/CBL- configuration parameters
Name Testing addresses Return to state code
CBLCBL 2.0.0.127.cbl.anti-spam.org.cn 127.0.8.2
CDLCDL 0.0.0.240.cdl.anti-spam.org.cn 127.0.8.4
CBL+CBL+ 2.0.0.127.cblplus.anti-spam.org.cn 127.0.8.6
CBL-CBL- 2.0.0.127.cblless.anti-spam.org.cn 127.0.8.5


PostfixPostfix & Qmail example, ...

* another page on "How to set up a simple real-time server blacklist"

* another page on "Real-time white list service -- CML"

CML-- Chinese mail server CBL/CBL+ white list of services mainly
as a useful supplement.

CML included in the registration records CASA legitimate mail
server address.
The IP address mainly two categories :
The mail server operators in major-mail addresses,
such as SINA,263, Gmail, etc.
Reliable mail server address, mail is not the main operators,
but effectively done in the anti-spam area, Spam complaints
and would respond positively to the mail server address
CML will affect our CBL/CBL+/CBL- other blacklisted IP
addresses recorded.
CML operator of the main items which will be placed to
address all of our blacklist; and the credibility it
could not join the mail server address to CBL- China.

What is the significance of adding CML?
For mail operators, Concerning CML can ensure that the
use of CASA to join the service because of the mail
server will CBL/CBL+/ CBL- caused mail was blocked;
and we control the spam you from time to time to
inform you that to you promptly.

Non-operating items for the regular mail server,
if you really made unremitting efforts in the
anti-spam area and the sending spam can actively
prevent and deal with spam complaints CML can then
join to ensure that accidents do not result in
sending some spam mail you sent was blocked;
Whenever we monitor and from your address to the
junk mail, we will first inform you deal with,
During and after the end of treatment in your
address will not join CBL/CBL+/CBL- China.
Only you and no timely treatment and stop sending
spam, The address will be added to your CBL/CBL+;
If you do not take a long time for sending spam
measures, then you will lose your eligibility
CML, You might be included in the address to
CBL/CBL+/CBL- China.

How to join CML?
Mail operators can comply with the following conditions
for the main operator of the mail link to join with us :
Mail users above 10,000
Its IP address for mail services in the six months
they belong not to complain Its IP address for mail
services in the main Concerning foreign services
(such as spamcop/spamhau s/ordb) not complained
within three months
APNIC must be registered directly at the contact
information managers

Does not meet the above conditions mail or regular
mail server operators can join as a credible mail server.

We will launch for the maintenance of the main items in
2006/5 and reliable mail server operator interface
advised to wait.

White list for some time can also support real-time
white list software (eg SpamAssassin) investigation with use.

CML configuration parameters
Name Testing addresses Return to state code
CML 1.0.0.127.cml.anti-spam.org.cn 127.0.8.1

--
E-Mail Sent to this address <Blac...@Anitech-Systems.com>
will be added to the BlackLists.

E-Mail Sent to this address will be added to the BlackLists

unread,
Mar 8, 2007, 5:35:47 PM3/8/07
to
BlackList wrote:
> Chris Lewis wrote:
>> anti-spam.org.cn ... as it's all chinese, I haven't a
>> clue what the page actually says.
>> If there's someone here who can read chinese, it'd be
>> interesting to know the gist of what these lists are.
> icky transliteration follows,
> Anti-spam service
> Real-time blacklist (RBL) -- CBL/CDL/CBL+/CBL-
<SNIP>

> As the website is offering a free service does not provide
> business security, in order to avoid legal disputes. Before
> you agree to use CBL/CDL/CBL+/CBL- belong to the "terms of
> service", the following are the terms that need to focus
> the attention of some but not limited to :
> 3) to amend the terms of service and service Amendment ...
> 6) Refusal to provide security ...
> 7), a limited liability ...

There is another page (about 2-3 pages long) of legal related
to the specific ones pointed out (above).

There also a page on configuring DNS servers for use
with a local blacklist.

There seems to be forum pages, with newsletter announcement
and whitepaper type of stuff.

There is also a page of sponsoring (or founding) companies?

{I'm sure I missed other stuff.}

dwhe...@gmail.com

unread,
Apr 2, 2007, 12:23:02 PM4/2/07
to

I am having a similar problem. It's causing some major frustration
for folks at my domain who are attempting to e-mail other folks. Is
there a way to get off of their list? I think some of the more well-
known SPAM filters are using their service to block spam. I am not a
spammer.

E-Mail Sent to this address will be added to the BlackLists

unread,
Apr 2, 2007, 3:37:34 PM4/2/07
to
dwhe...@gmail.com wrote:
>> I am currently testing the following IP blacklists
>> running in China.
>> cml.anti-spam.org.cn
<http://groups.google.com/group/news.admin.net-abuse.blocklisting/msg/2357283432dc6e95>

> I am having a similar problem.

You are testing some Chinese DNSbls ?


> It's causing some major frustration

Stop testing with them ?


> for folks at my domain who are attempting
> to e-mail other folks.

That does not sound like testing,
it sounds like recipients rejecting your messages.

If the recipients are not willing to whitelist
your messages (or do something else to make certain
they get them), they they don't really want them.

If those recipient need / want / expect those messages,
they will find a way to get them.


> Is there a way to get off of their list?

Perhaps, are you certain you are listed in the
specific DNSbls of anti-spam.org.cn ?

or some other of the 700+ public DNSbls?
http://moensted.dk/spam/?addr=


> I think some of the more well-known SPAM filters are


> using their service to block spam.

I doubt it, unless "well-known SPAM filters"
with the localization of China & nearby.


> I am not a spammer.

Not many say they are Spammers,
certainly not most Spammers.

--
E-Mail Sent to this address <Blac...@Anitech-Systems.com>
will be added to the BlackLists.

--

Chris Lewis

unread,
Apr 2, 2007, 11:33:17 PM4/2/07
to
According to <dwhe...@gmail.com>:

> On 2 Mar, 15:22, "totojepast" <totojep...@razdva.cz> wrote:
> > The blacklists:
> > - cbl.anti-spam.org.cn
> > - cblplus.anti-spam.org.cn
> > - cblless.anti-spam.org.cn

> > The whitelist:
> > cml.anti-spam.org.cn


> I am having a similar problem. It's causing some major frustration
> for folks at my domain who are attempting to e-mail other folks. Is
> there a way to get off of their list? I think some of the more well-
> known SPAM filters are using their service to block spam. I am not a
> spammer.

I don't think very many people will run afoul of the DNSBLs listed
above, except for email sent to China. Given that there's no
formal translations of their web pages, I wouldn't expect
them to be very widely used outside of China. I would not, for example,
expect many "well known spam filters" that are used in, say, Europe
or North America to use them.

You're probably thinking of cbl.abuseat.org. Which is completely
different (see the rest of this thread). Go to the cbl.abuseat.org
web site and check out their lookup/removal pages.
--
Chris Lewis,

Age and Treachery will Triumph over Youth and Skill
It's not just anyone who gets a Starship Cruiser class named after them.

--

0 new messages