Each section below is a simple overview of how each SORBS database is
administered and how you can get out if listed.
Detailed listing and delisting information for each database may be
reviewed under the SORBS menu, in the 'Listing and Delisting' section.
Please read these carefully before mailing the SORBS support system
about an entry.
Note: Use of this service is currently free of charge.
References to the SORBS fine are ONLY meant in the context
of the database of spam received by SORBS spamtraps or administrators.
There is no charge for removal from the proxy, vulnerability, relay,
zombie or DUHL databases.
Proxy Databases (HTTP/SOCKS & Misc)
Listing is automatic when you have a proxy identified by a SORBS
testing machine or by one of the other known proxy lists or DNS based
blocklists.
Delisting is a semi-automated process and is described in
detail in the Retest FAQ.
Open Relay (SMTP) Database
Listing is semi-automatic and manual. This is due to the fact
that correctly identifying an open relay is not always possible
with automatic methods.
Delisting is a semi-automated process and is described in
detail in the Retest FAQ.
Vulnerabilities Database
Listing is a manual and automatic process and is performed
whenever a host is suspected of being hacked or abused. The automated
part is when an infected host contacts a SORBS test server and
attempts to exploit known worm code.
Delisting is manual and will be performed when you mail the
SORBS support system indicating the problem is fixed and the host is
patched against further attack. If a particular host is relisted more
than four times, the listing will be set for a period of one year
minimum.
Zombie Database
Listing is performed manually after exhaustive research.
Delisting is performed manually whenever an IP address block
is returned to its rightful owner.
Dynamic User/Host List Database (DUHL)
Listing is performed manually after contact from netizens or
ISPs indicating dynamically assigned space, or whenever SORBS admins
notice the same, for example by receiving spam from such an address
range.
Delisting is a manual process and will only be performed when
the owner of the IP address block contacts the SORBS support system to
indicate the addresses listed are statically assigned. There is also a
self-help mechanism for the automated exclusion of single IP addresses
from the DUHL; see the DUHL FAQ for
details.
ISP's are encouraged to submit lists of both their dynamically and
statically assigned address ranges through the SORBS support system.
We strive to ensure that there are no incorrect listings. This can be
done at any time as the database changes from day to day whenever
updates are required.
Note: This list should not list static address space, not even
dialups. This is for any dynamically assigned space regardless of the
method of connecting them to the Internet.
Spam Database
Listing is manual and is performed when any spam is received at
a SORBS spamtrap. SORBS spamtraps include, but are not limited to, the
private email addresses of the SORBS admins. On occasion, when a
particular network is seen to be spamming and the listing of a single
IP address seems to have no effect, increasingly larger sections of
the netblock will be listed. If spamming continues, the size of the
listing will be slowly expanded (depending on the number of spams
received) until something is done about the spammer.
Delisting. If the size of the listing is anything more than a
single IP address, delisting can only take place when the spammer is
no longer using the address space, in which case the size of the
listing will be reduced down to the originally spamming IP addresses
free of charge. The affected IPs (the ones used to send the spam)
will only be delisted when a donation us made to an acceptable charity
or good cause, or when sufficient time has passed, or when SORBS
determines that the netblock has been returned to the RIR; see the
Spam Database FAQ for details. The
charities and good causes SORBS approves will not have any connection
with any SORBS administrator either past or present.
Admin block requests
Listing is by request of the netblock owner.
Delisting is free of charge and at the request of the netblock
owner.
