xmppbl.org

Real-time blocklists for XMPP

xmppbl.org provides a Real-Time Block List (RTBL) service for XMPP.

What is an RTBL?

Internet blocklists are not a new idea. Such lists are commonly used in email to identify sources of spam, for example. Typically these are served over a protocol such as HTTP or DNS, and must be periodically downloaded or selectively queried in order to obtain information.

XMPP RTBLs are served over XMPP, using XMPP’s publish-subscribe protocol (XEP-0060) and this allows blocklist subscribers to receive updates immediately when entries are added to, or removed from, the blocklist.

What blocklists are available?

We currently host the following RTBLs:

muc_bans_sha256
SHA256 hashes of JIDs that have been identified as sources of spam in public channels.
spam_source_domains
A list of XMPP domains that have been identified as recently sending unsolicited “spam” to users.

How do I use the RTBLs?

To configure software to use our RTBLs, you will need to provide at least our service address (JID): xmppbl.org

In some cases you may also be asked to provide the specific RTBL ‘node’. If so, use whichever of the nodes listed above (e.g. muc_bans_sha256) is appropriate for your use case. Using the wrong nodes for your software may lead to data format mismatches.

For server operators

Learn how to enable RTBL functionality in your server:

For developers

We have RTBL documentation for developers if you want to integrate RTBL functionality into your XMPP software.

Who operates xmppbl.org?

We do! The service is a collaboration, run by a number of community members.

About the lists

How can I propose new entries for the list?

You can submit spam reports using any app which has support for XEP-0377. If you are a server operator, make sure your server is contributing those reports to our service to help improve the RTBLs.

For spam/abuse in public channels, we do not currently accept public reports directly, but rely on a distributed team of trusted operators. Forward any spam/abuse reports to your server operator, who can share them with other operators in the XSF’s XMPP Operators channel.

How can I get removed from the list?

The spam source RTBLs are fully automated, and we cannot add/remove entries on an individual basis. Servers may find themselves listed as a spam source if they are used by spammers as a relay for sending mass spam messages. This is likely to happen if you have unrestricted in-band registration, and do not remove or limit the automated registrations made by spam bots. Don’t worry… once your server stops relaying spam, your entry in the list will automatically expire.

Some resources for server operators:

The channel ban list is maintained by a team of trusted operators, and it is unlikely you will find yourself on this list unless you are deliberately trying to spam or abuse the XMPP network. If you think you are affected by an incorrect listing, you should report this to your server operator who can bring it to someone’s attention in the operators channel.