CBL Rsync Access Request

IMPORTANT Please read and understand the rsync usage policies before registering and using rsync access.

WARNING!, if you are at this page because your email is blocked or your IP is listed, you are on the WRONG page.

If you are here because your IP is listed in the CBL, go here.

This page is exclusively for email providers wishing to rsync download the CBL database for use in mail filtering, or for large connectivity providers who wish to rsync the CBL database to find compromised machines in their own network.

This page is NOT intended to help you find out what is wrong with a specific IP. This page does not have anything to do with delisting listed IPs.

WARNING: it is CBL policy that spam filter and spam filter service vendors MUST obtain a paid-for feed from Spamhaus. Filter providers that do not have a paid-for feed from Spamhaus, or sites that have not registered for rsync MAY find themselves inhibited from obtaining a CBL zone feed without warning.

WARNING!, Large scale sites (eg: large ISPs) are expected to acquire a paid rsync feed from Spamhaus, rather than an rsync feed from the CBL.

Registration is being strictly enforced at this time. If the IP issuing a rsync download request isn't registered, the zone transfer will be denied.

Rsync downloads to the CBL have become far more popular than originally anticipated, and is consuming considerable bandwidth resources on our servers. In future, it may be necessary to restrict/limit access.

We strongly recommend that you obtain a paid XBL (or SBL-XBL) feed instead of the CBL see: SpamHaus. The list is more all-encompassing, and the payments help ensure the continued survival of SpamHaus. However, the CBL list remains freely accessible.

By registering, we can contact you if we have to make changes (ie: move or add servers, discontinue public access), or notice problems with how you're downloading the zone.

Once you have registered, you will receive an email when your IP address has been enabled for rsync download. If you do not hear from us in 48 hours, please contact us at cbl@cbl.abuseat.org.

We will not share this information with anyone, it will be used exclusively for informing you of changes to the CBL.

Notes:

1. Traditionally rsync is used for systems processing more than 100,000 to 250,000 inbound messages per day. Lower volume mail servers generally should use the public name servers.

2. Your daily message volume estimated above is not the same as your number of mail accounts. The daily message volume will be many times larger than the number of mail accounts.

3. Please include only one IP address. If you have multiple servers needing to use RBL zone files, then rsync to that single address, and use it as an rsync server to locally distribute files to the other servers in your network. That is a standard practice. Here's a sample rsyncd server configuration file.

4. Please rsync no more often than once every hour (unless you are only rsyncing to find out the addresses of infected machines in your own network - in that case limit it to twice per day). Please choose random minutes to spread the load around, avoiding 0, 30, 20, 40, etc.

5. If you are using SpamCopURI, then please use the most recent version as it supports per-query caching of DNS requests.

6. This information will only be archived strictly for the purpose of assisting you to use the CBL, and for informing you of changes.

7. Please contact any other RBLs you may be using to request rsync access to their zone files. Use rsync and your local caching name server to serve those locally also. Many other RBLs offer (only) rbldnsd versions of their zone files.