DNSBL - DNS-based Blacklist
Complete guide to our DNS-based Blacklist service with multi-level reputation scoring: how it works, scoring model, return codes, mail server integration, and delisting.
What is the Provider.tools DNSBL?Understanding our DNS-based Blacklist with its multi-level reputation and scoring model - what it is, how it works, and why it differs from traditional blacklists.Scoring Model, States & Return CodesDetailed explanation of the multi-level scoring model, listing states, signal weights, score decay, and the DNS return codes.Querying the DNSBLHow to query the DNSBL via DNS - including IPv4, IPv6 nibble format, and the HTTP API.Mail Server IntegrationStep-by-step guides for Postfix, Exim, Rspamd, and SpamAssassin - including recommended conservative, balanced, and aggressive configurations.Reporting & DelistingHow to report malicious IPs, how the scoring system processes your report, and how to request delisting.Attack Defense - moved to its own categoryThe Attack Defense guide has moved to its own KB category with articles for servers, firewalls, IP checks, API and GDPR.False-Positive Protection (Whitelists, Tor & dnswl)How the network avoids mis-listing legitimate infrastructure: internal whitelists, dnswl.org reputation, tor exit handling and automatic score decay.CrowdSec IntegrationReport attacks from CrowdSec to the Attack Defense Network via the HTTP plugin - one config file, done.Reporting API, Tokens & Plesk PluginReporting is open to everyone - no registration required. Use API tokens for higher signal weight. Automate with the Plesk plugin.