What Is a DNS Blocklist (DNSBL) and How to Check If You Are Listed

A DNS blocklist (DNSBL, sometimes called an RBL or blacklist) is a database of IP addresses or domain names associated with spam or abuse, published so that mail servers can query it with an ordinary DNS lookup during delivery. If the connecting IP or a domain in the message appears on a list the receiver trusts, the message is rejected, deferred or scored heavily toward spam.

Quick summary

• Spamhaus ZEN (IPs) and DBL (domains): the most widely used by large and small receivers alike.
• Spamcop: driven by user reports, listings are usually short-lived.
• Barracuda BRBL: used by Barracuda appliances common in corporate email.
• SURBL and URIBL: domain lists applied to links inside the message body.
• Microsoft and Google internal lists: not public and not queryable, but they behave like blocklists and are only visible through rejections.

How a DNSBL query works

The receiving server reverses the sender IP and appends the list zone. For IP 203.0.113.10 and the Spamhaus ZEN list, it queries 10.113.0.203.zen.spamhaus.org. If DNS returns an address (typically 127.0.0.x), the IP is listed and the last octet encodes the reason. If it returns NXDOMAIN, the IP is clean. Domain lists such as Spamhaus DBL and SURBL work the same way with the domain name instead of a reversed IP, and they check domains found in the From, Return-Path and body links.

Lists that actually matter

• Spamhaus ZEN (IPs) and DBL (domains): the most widely used by large and small receivers alike.
• Spamcop: driven by user reports, listings are usually short-lived.
• Barracuda BRBL: used by Barracuda appliances common in corporate email.
• SURBL and URIBL: domain lists applied to links inside the message body.
• Microsoft and Google internal lists: not public and not queryable, but they behave like blocklists and are only visible through rejections.
• Dozens of minor lists on aggregate checkers: a listing on an obscure list rarely affects real delivery.

Example: what a listing looks like

$ dig +short 10.113.0.203.zen.spamhaus.org
127.0.0.4        <- listed (XBL: compromised host)

$ dig +short 10.113.0.203.zen.spamhaus.org
(no answer)      <- not listed

Typical rejection text in a delivery log:
550 5.7.1 Service unavailable; client [203.0.113.10] blocked using zen.spamhaus.org

How to check if you are listed

1. Find the sending IP. If you use a hosted provider, it is in the bottom trusted Received header of a message you sent. If you self-host, it is your server IP.
2. Enter it at MXToolbox Blacklist Check or check.spamhaus.org. Do the same for your domain name.
3. Read the reason code and the listing date. Each list has a lookup page explaining the reason.
4. Check your delivery logs for the actual rejection text; that names the list the receiver used, which is the only list that matters for that receiver.

How listings happen and how to get removed

• A compromised mailbox password used to send spam through your account. Reset the password first, or the listing returns within hours.
• A website form or plugin abused to send arbitrary mail. Add validation and rate limits before requesting delisting.
• Buying or scraping a list and sending to it. Stop, remove the addresses, and only then apply for removal.
• A shared IP where another customer of the same host misbehaved. Contact the host; a good one delists quickly.
• Most lists offer self-service removal after the cause is fixed; Spamhaus requires the listed party to fix the root cause and then expires or removes the entry.

Blocklists and OquMail

OquMail sends from its own monitored IPs, so IP listings are handled by OquMail, not by you. Your domain reputation remains yours to protect: send to people who expect your mail, keep bounce rates low, and remove dead addresses. When a message is rejected because of a listing, the per-message delivery log shows the exact 5xx text including the list name, so you know whether the issue is the IP, your domain or a link in the body.

Common questions

Blocklist or blacklist, which is correct?

They mean the same thing. Blocklist is the term most lists and providers now use.

I am listed on a small list I have never heard of. Should I worry?

Only if a receiver you care about uses it. Check the rejection text in your delivery logs; if that list is never named, ignore it.

Can a domain be listed even if the IP is clean?

Yes. Domain lists such as DBL judge the domain by what it has been used for, including links in spam sent from anywhere.