The Spamhaus Project

news

UPDATE - Informational Listings in the Spamhaus Blocklist

Informational listings have received a lot of attention recently, including some helpful of feedback - namely, the intelligence is helpful but it creates too much "noise" in the SBL. So the Project Team will be making changes in the near future.

by The Spamhaus TeamFebruary 24, 20232 minutes reading time

Jump to

Introduction

There’s been a significant amount of feedback (both negative and positive) from the broader industry about the increase in the informational listings in the Spamhaus Blocklist (SBL). You’ve told us that the informational listings create too much “noise” in the SBL; however, the intelligence and early warning are appreciated. So here’s what the Spamhaus Project is going to be doing in the near future…### 1. Initial early warning signals

These will no longer be placed in the SBL. Instead, this intelligence will be placed in Spamhaus' Intelligence API by Spamhaus Technology. This will be accessible from the Reputation Portal for the IP addresses that are associated with your ASN(s), making the data easier to consume, or via check.spamhaus.org.

As always, ignore this reputation signal at your peril. Where IP addresses continue to be associated with the same poor sending behavior, an informational listing will be made in the SBL.

2. Informational Listings in the SBL

These will exist, but at a much-reduced volume (unless everyone ignores the intelligence shared via the API). Once you receive one of these, you will know that things are getting increasingly serious, as there is a persistent pattern of bad sending practices. But, at this stage, the IP address in question will not be placed in the zone to be used to filter.

3. SBL Listing

Yes, it’s time to worry. If our researchers see that you have ignored the initial signals and the informational listing(s), the sending IP will be listed and placed in the zone that is used to filter.

When are these changes happening?

In the near future. The exact dates are to be confirmed, but please rest assured that communications will be made via Twitter and LinkedIn. In the meantime, for those of you who want to keep the listings in place, the team won’t be removing them. Please get in touch via the usual channels for those who would like them removed.

In the meantime, our researchers are revising their processes to reduce the deluge of informational listings until this signal is available via the API.