检查IP是否在RBL库中的脚本

一、邮件服务器ip

邮件服务器将邮件投递到收件人服务器，连接对方收件人服务器使用的ip很重要，因为太差的ip信誉度会导致对方邮件服务器的反垃圾机制拒绝接收邮件，或者将邮件投递到垃圾箱。
如果出站的ip地址在一些反垃圾组织的Realtime Blackhole List（实时黑名单列表）中，那么邮件很大概率都会被对方拒收或者被隔离进垃圾箱等。

二、提高ip信誉度的常见做法

1. 声明ip地址为静态ip，即做反向地址解析指向自己的域名（PTR记录）；
2. 域名dns解析做SPF、DKIM、DMARC解析记录；
3. 邮箱账号密码做策略，禁止使用弱密码，避免被盗群发垃圾邮件后ip被污染；
4. 使用邮箱的使用，尽量用SSL加密方式登录，尽量不要使用公共wifi等网络使用登录邮箱；
5. 避免发送广告、通知、验证码等等商业推广等垃圾邮件信息出站；
   ... ...

三、RBL检测脚本，来源于GitHub

在企业邮箱管理中，总有些用户是不听劝告，不注意个人信息保护等原因导致邮箱被盗，被盗账号群发垃圾邮件或者是其他情况导致邮件服务器ip进RBL库的情况。
再此分享一个检查ip的脚本，申诉ip地址也很简单，到对应网站根据提示操作即可解除。有些国外的网站会出现需要填写谷歌验证码的情况，此时您需要一把梯子或浏览器插件。
脚本很简单，做相应修改可做Zabbix自动监控，IP被列入监控告警提示管理员。
脚本如下，感谢作者。

#!/usr/bin/env bash
####################################################################
# bl - BLACKLIST CHECK UNIX/LINUX UTILITY                          #
# copyright: (c) 2014 Anders Aarvik                                #
# author: Anders Aarvik (aarvik92@gmail.com) and contributors      #
# license: MIT licensed. See LICENSE                               #
# description: I was just a bit tired of web interfaces            #
####################################################################

#### main ####
main() {
  [ $# -ne 1 ] && error "Please specify a FQDN or IP as a parameter."
  fqdn=$(echo $1 | grep -P "(?=^.{5,254}$)(^(?:(?!\d+\.)[a-za-z0-9_\-]{1,63}\.?)+(?:[a-za-z]{2,})$)")
  if [[ $fqdn ]] ; then
    echo "You entered a domain: $1"
    domain=$(host $1 | head -n1 | awk '{print $4}')
    reverseit $domain "IP not valid or domain could not be resolved."
  else
    echo "You entered an IP: $1"
    reverseit $1 "IP not valid."
  fi
  loopthroughblacklists $1
}

#### reverseit ####
reverseit() {
  reverse=$(echo $1 |
  sed -ne "s~^\([0-9]\{1,3\}\)\.\([0-9]\{1,3\}\)\.\([0-9]\{1,3\}\)\.\([0-9]\{1,3\}\)$~\4.\3.\2.\1~p")
  if [ "x${reverse}" = "x" ] ; then
    error $2 
    exit 1
  fi
}

#### loopthroughblacklists ####
loopthroughblacklists() {
  reverse_dns=$(dig +short -x $1)
  echo $1 name ${reverse_dns:----}
  for bl in ${blacklists} ; do
      printf $(env tz=utc date "+%y-%m-%d_%h:%m:%s_%z")
      printf "%-40s" " ${reverse}.${bl}."
      listed="$(dig +short -t a ${reverse}.${bl}.)"
      if [[ $listed ]]; then
        if [[ $listed == *"timed out"* ]]; then
          echo "[timed out]" | cecho YELLOW 
        else       
          echo "[blacklisted] (${listed})" | cecho LRED
        fi
      else
          echo "[not listed]" | cecho LGREEN
      fi
  done
}

#### error ####
error() {
  echo $0 error: $1 >&2
  exit 2
}

#### cecho ####
cecho(){
  LGREEN="\033[1;32m"
  LRED="\033[1;31m"
  YELLOW="\033[1;33m"
  NORMAL="\033[m" 
  color=\$${1:-NORMAL}
  echo -ne "$(eval echo ${color})"
  cat 
  echo -ne "${NORMAL}"
}

#### blacklists - grabbed from https://hetrixtools.com/blacklist-check ####
blacklists="
0spam.fusionzero.com
xbl.spamhaus.org
zen.spamhaus.org
sbl.spamhaus.org
pbl.spamhaus.org
cbl.abuseat.org
cbl.anti-spam.org.cn
spamsources.fabel.dk
access.redhawk.org
all.s5h.net
all.spamrats.com
aspews.ext.sorbs.net
babl.rbl.webiron.net
backscatter.spameatingmonkey.net
b.barracudacentral.org
bb.barracudacentral.org
black.junkemailfilter.com
bl.blocklist.de
bl.drmx.org
bl.konstant.no
bl.mailspike.net
bl.nosolicitado.org
bl.nszones.com
block.dnsbl.sorbs.net
bl.rbl.scrolloutf1.com
bl.scientificspam.net
bl.score.senderscore.com
bl.spamcop.net
bl.spameatingmonkey.net
bl.suomispam.net
bsb.empty.us
cart00ney.surriel.com
cblless.anti-spam.org.cn
cblplus.anti-spam.org.cn
cdl.anti-spam.org.cn
combined.rbl.msrbl.net
db.wpbl.info
dnsbl-1.uceprotect.net
dnsbl-2.uceprotect.net
dnsbl-3.uceprotect.net
dnsbl.cobion.com
dnsbl.dronebl.org
dnsbl.justspam.org
dnsbl.kempt.net
dnsbl.net.ua
dnsbl.rv-soft.info
dnsbl.rymsho.ru
dnsbl.sorbs.net
dnsbl.spfbl.net
dnsbl.tornevall.org
dnsbl.zapbl.net
dnsrbl.org
dnsrbl.swinog.ch
dul.dnsbl.sorbs.net
dyna.spamrats.com
dyn.nszones.com
escalations.dnsbl.sorbs.net
fnrbl.fast.net
hostkarma.junkemailfilter.com
http.dnsbl.sorbs.net
images.rbl.msrbl.net
ips.backscatterer.org
ix.dnsbl.manitu.net
l1.bbfh.ext.sorbs.net
l2.bbfh.ext.sorbs.net
l4.bbfh.ext.sorbs.net
list.bbfh.org
mail-abuse.blacklist.jippg.org
misc.dnsbl.sorbs.net
multi.surbl.org
netscan.rbl.blockedservers.com
new.spam.dnsbl.sorbs.net
noptr.spamrats.com
old.spam.dnsbl.sorbs.net
phishing.rbl.msrbl.net
pofon.foobar.hu
problems.dnsbl.sorbs.net
proxies.dnsbl.sorbs.net
psbl.surriel.com
rbl2.triumf.ca
rbl.abuse.ro
rbl.blockedservers.com
rbl.dns-servicios.com
rbl.efnet.org
rbl.efnetrbl.org
rbl.interserver.net
rbl.megarbl.net
rbl.realtimeblacklist.com
recent.spam.dnsbl.sorbs.net
relays.dnsbl.sorbs.net
rep.mailspike.net
safe.dnsbl.sorbs.net
smtp.dnsbl.sorbs.net
socks.dnsbl.sorbs.net
spam.dnsbl.anonmails.de
spam.dnsbl.sorbs.net
spamlist.or.kr
spam.pedantic.org
spam.rbl.blockedservers.com
spamrbl.imp.ch
spam.rbl.msrbl.net
spam.spamrats.com
srn.surgate.net
stabl.rbl.webiron.net
st.technovision.dk
talosintelligence.com
torexit.dan.me.uk
truncate.gbudb.net
ubl.unsubscore.com
virus.rbl.msrbl.net
web.dnsbl.sorbs.net
web.rbl.msrbl.net
z.mailspike.net
zombie.dnsbl.sorbs.net
"

### initiate script ###
main $1