The same blacklist served over DNS as a private RBL zone. Add one line to Postfix or Rspamd and connecting attackers are rejected in real time, the way mail servers already expect.
A downloaded blocklist is out of date the moment you import it, and importing it on every server is a cron job you have to maintain. A DNS zone has neither problem: your mail server asks at the moment of the connection and gets the current answer.
Live DNSBL Add-on · from PRO
Who it's for
Mail and hosting operators filtering SMTP traffic at the connection layer.
Pricing
7.90 € a month or 79 € a year (incl. VAT), bookable from the PRO plan
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_rbl_client <your-token>.bl.reportedip.de=127.0.0.[2..3],
...One directive covers IPv4 and IPv6, Postfix builds the reversed query for either family itself. RFC 5782 test point: looking up 127.0.0.2 always answers, so you can verify the setup without waiting for a real attacker.
Release notes, guides and reports, newest first.
Add the zone string to Postfix or Rspamd as shown above. Connecting attackers are rejected before the message body is ever transferred.
No, it sits next to it. Spamhaus is strong on mail abuse, this zone is strong on addresses caught attacking websites, which often precede the spam run.
The same high-confidence subset as the blacklist feed: 75 % confidence or higher, with a 48-hour false-positive cool-down before anything is listed.
Delisting is free and does not require an account. Submit the address and it is checked, with the scoring history attached to the decision.
Same dataset, different shape.
REST Threat Intelligence · Free tier
The reputation engine behind everything. Query IPs, submit reports, pull the blacklist and run bulk operations from any language, your SIEM, your firewall or your hosting panel.
Downloadable Feed · Free
Community-driven blacklist, automatically scored from real-time reports. Plain text, JSON and CSV, ready for iptables, nftables, nginx or any blocklist consumer.
WordPress Plugin · Free
Real-time WordPress security with 16 detection sensors, a Web Application Firewall, four 2FA methods and an opt-in community threat network. Free and open source forever.
Linux Server Agent · for hosters and data centres
One static binary that puts thousands of known attackers into your kernel firewall before they reach you, and watches every log your server already writes for the ones nobody has reported yet.
DNS Diagnostics · Free
Domain health diagnostics from about 100 resolvers in more than 50 countries. Validate SPF, DKIM, DMARC and DNSSEC, run DNSBL lookups and track propagation during migrations.
PTR Check · Free
Resolve the PTR record of an IPv4 or IPv6 address and check whether it resolves back. A PTR record nobody confirms is the most common reason a mail server is refused at the door.
7.90 € a month or 79 € a year (incl. VAT), bookable from the PRO plan
