SURBL Data Feed Request

Type of organization:
   Internet Service Provider
   Non-profit, educational or government
   Filter or security vendor
   Other organization

Number of users:

Average daily unfiltered inbound message volume:
(In other words how many messages do your inbound mail systems typically handle per day?)

Type of access:
   rsync (Sponsored Data Service - SDS)
   DNS (Private Query Service - PQS)

For users and volume, please enter single numbers, not a range. Punctuation and spaces will be deleted.

Notes:

 

For more information, please see: Setting up a SURBL name server. Select "SDS" under Type of access above to request rsync access.

 

 

 

  1. Please also see the Usage Policy page.

     

  2. Sponsored Data Service (SDS) is generally recommended for systems processing more than 250,000 inbound messages per day or having more than 1,000 users. Using rsync and setting up a local rbldnsd name server for mirroring SURBL data offers many advantages, including:
    1. Significantly improves the performance of your mail filters due to faster query responses from a local name server directly on your network
    2. Significantly improves performance due to quicker data file updates
    3. Reduces your network traffic
    4. Helps reduce public DNS server traffic
  3. Private Query Service (PQS) is available for those who wish to use DNS queries to access SURBL data instead of setting up rsync and a local rbldnsd server. Like SDS, PQS gets faster updates than the public nameservers, resulting in significantly better performance. Select "PQS" under Type of access above.
  4. Please sign up for the zones and announce SURBL mailing lists in order to keep up to date with any important changes to the zone files and to get updates about the SURBL project. Message volume on these lists is very low.

Data Feed Request

Our Data Feeds offer higher performance for professional users through faster updates and resulting fresher data. Freshness matters since the threat behavior is often highly dynamic, so Data Feed users can expect higher detection rates and lower false negatives.

The main data set is available in different formats:

  • API (Restfull API)
  • CSV (Comma Separated Values)
  • DNS (Private Query Service - PQS)
  • RPZ (DNS Response Policy Zones)
  • RSYNC (Sponsored Data Service)
  • RTF (JSON Real time feeds)

Rsync and DNS are typically used for mail filtering and RPZ for web filtering. High-volume systems and non-filter uses such as security research should use rsync.

For more information, please contact your reseller or see the references in Links.

Sign up for Data Feed Access.

  • Sign up for data feed access

    Direct data feed access offers better filtering performance with fresher data than is available on the public mirrors. Sign up for Data Feed Access.

  • Supported Applications

    • Apache SpamAssassin - #1 Open-Source Spam Filter
    • milter-link - filter for Sendmail and Postfix
    • More...

  • Learn more ...

    • AB - Abuse and spam sites
    • PH - Phishing sites
    • MW - Malware sites
    • More...