Real-time Blackhole List of Bulgarian spam sources

Policy: rbl.fccf.net is manually populated. On first spam, the single ip is blocked, and on second spam from the same network, the whole network is blocked.

Removal requests: rbl@fccf.net (RBL restrictions apply) or use the form.

This service is provided as-is, without any guarantee. The service operators take no responsibility in the ways it's used.

The service operators reserve the right to terminate the service to anyone without prior notification or consent based solely on the operator's discretion.

Using RBL with postfix:

Insert this in your /etc/postfix/main.cf:

smtpd_client_restrictions = reject_rbl_client rbl.fccf.net

To test if a specific address (10.20.30.40) is listed:

$ host 40.30.20.10.rbl.fccf.net
40.30.20.10.rbl.fccf.net has address 127.0.0.2

Spamassassin usage

(add this to your local.cf, for example):

header FCCF_BG_RBL      eval:check_rbl('fccf_bg','rbl.fccf.net')
describe FCCF_BG_RBL rbl.fccf.net for sources of Bulgarian spam
score FCCF_BG_RBL 3.5 3.5 3.5 3.5

(you can tweak the scores to your preference)