How they work

A blocklist — DNSBL, for DNS-based blocklist — is a list of IP addresses or domains published over DNS. A receiving mail server queries it during the SMTP conversation, and if you are listed it can reject the message outright or weight it heavily toward spam.

The ones that matter

Spamhaus is the one that counts. Its lists are used by an enormous share of receivers and a listing there is a real delivery problem that needs immediate attention.

SURBL and URIBL list domains found in message content rather than sending IPs, which makes them relevant to your tracking and redirect domains, not just your sending ones.

Beyond those, a long tail of small lists exists that almost nobody queries. Being on one of them is usually not worth acting on, and services that alarm you about a listing on a list nobody uses are selling anxiety.

Getting delisted

Fix the cause first, because delisting without fixing gets you relisted within days and repeat listings are treated more harshly. Then file through the operator’s own removal process — most have a self-service form and most honour a genuine first request.

One important trap when checking programmatically: Spamhaus returns 127.255.255.254 to signal that your query was refused, typically because you are using a public resolver. That is an error code, not a listing, and tools that misread it will report a hit that does not exist.

Check yours

These run free in your browser. Nothing you type reaches a server.

Common questions

I am listed on a blacklist I have never heard of. Should I worry?

Usually not. If receivers do not query it, a listing there has no effect on your delivery. Spend the effort on Spamhaus and the URI lists.

How long does delisting take?

Hours to a few days for most operators once the underlying cause is fixed. Automatic expiry is common for minor listings.

Can a domain be listed as well as an IP?

Yes. Domain listings on SURBL and URIBL are triggered by the domains appearing in message bodies, which includes your tracking and redirect domains.

Next

Related concepts

How I measure this on client accounts

Everything above is diagnosis. To confirm a fix worked you need placement data — seed accounts across the major providers, plus the DMARC aggregate reports read as a trend rather than a wall of XML. GlockApps is what I run for both.

See GlockApps →Affiliate link — it costs you nothing and help keep these tools free. Everything I use →
When it is broken

If this is the thing going wrong

The pages explain it. If you would rather it was simply fixed, that is the work I do.

← All conceptsEmail authenticationReputationDeliveryInfrastructureBook a call →
Back to top