A
"DNS black hole list" is a form of antispam filter used by some anti
spam vendors
There
are many ways that vendors use to identify junk e-mail. This is one of
them:
A spam DNS blackhole list, (DNS = Domain Name Server), or DNS
BlackList (DNSBL for short), is a list of internet computers identified
by their IP addresses that are known to have actively participated in
sending spam e-mail, either deliberately or by some side effect of
their mis-configuration. For example they have been hacked and had a
proxy server installed, they have an open relay e-mail server, they are
running an incorrectly configured proxy server, or they are running an
unpatched web server that can be used to send spam.
Several organizations operate DNSBL servers that can be queried by
anybody to see if a certain IP address is in their blacklist. Some
servers are more restrictive than others in adding IPs to their lists
and ensure they only add the worst or most easily identified offenders.
Others can be overly ambitious and retain IPs in their list long after
the system in question has been "fixed" or re-used by another innocent
party, resulting in false positives.
K9, available via our Home Page, has the option to use a DNSBL
server to aid in identifying spam by taking the IP addresses found in
the e-mail headers and querying the DNSBL server specified in the List
Server field when e-mail arrives. K9 does not directly associate a
DNSBL hit with spam; if a hit occurs K9 will increment the count of a
special keyword in its database (either the Good database if a DNSBL
hit occurs on a Good scored e-mail, or in the Spam database if a DNSBL
hit occurs on a Spam scored e-mail). This will help in identifying the
validity of the DNSBL list in identifying spam IP addresses by letting
K9 learn over time how useful the results are.
If a DNSBL hit occurs on an e-mail that has already been
identified as Spam when the e-mail arrives, K9 will add the word
[DNSBL] to the e-mail's Subject or header line, in addition to the
[Spam] marker. The program does not add this special marker if the
e-mail was identified as Good.
K9 can keep a list of IP addresses that it has already checked
against the DNSBL in memory, (a cache), so that it can reduce the time
needed to lookup an IP address. You can choose how long it keeps
entries in its IP cache by specifying the number of days in the "Days
to cache" address box.
If you have this option enabled and experience slowdowns during
e-mail checking or you are on a very slow dial-up connection you may
want to disable Blackhole list checking since the time required to
query the remote DNSBL server over the network can affect the overall
speed of K9.
The above description of a DNS blackhole list appears on Robin
Keir's K9 web. More on this, and similar subjects, may be found via the
following link: A copy of K9 is available via our Home Page. Just
scroll down to about the middle of the page and you'll see it!
Problems with Spam in Outlook 2010?
- Try Spam Reader - free anti-spam plugin for Microsoft Outlook
http://www.keir.net/k9_advancedtab.html
Spam Folder in Outlook 2010 | Outlook AntiSpam | Spam Outlook | Block Email Outlook | Junk Mail Outlook 2010 |