Skip to main content

Antelao Blocklist

Antelao Blocklist is a blocklist service for sign-up and contact forms. It checks a mail address, its domain and the client's IP address against your own entries and against public lists of throwaway mail domains and abusive networks, which it downloads from their publishers and keeps up to date itself. It can also check that a domain receives mail at all.

It ships as two images: the API, and an optional console.

It answers questions and decides nothing​

The service says whether what it was asked about is listed, and why, in one short reason a form can record. What the form then does - refuse the sign-up, hold it for review, ask for another address - is the form's own policy. The service never refuses a visitor itself.

What it checks​

  • Your own entries: full mail addresses, domains together with their subdomains, and client IP addresses and ranges
  • Public lists of throwaway mail domains, one of which is also built into every release
  • Public lists of IP addresses: Tor exit nodes, and a list of hijacked network ranges
  • Whether the domain receives mail, asked of DNS when a check asks for it
  • Exceptions: a domain or an IP that one public list holds but that you want through all the same
  • Batches of up to a hundred checks in one call

Every change to the entries and the lists is a job: the API answers at once with the job, and the console follows it to its end. See Lists and entries.

Licensed list by list​

Each public list and the mail-domain check is switched on by its own feature in the license. A list the license does not cover is not shown, never downloaded and never checked against.

Nothing is ever refused for want of a license. Without one, every check is still answered, from your own entries and the built-in list of throwaway domains, and the answer says "unlicensed": true. The service can be licensed by its own license, or sponsored by an Odoo Host Manager license. See Licensing.

Every installation downloads its own lists​

Each installation downloads every list it uses straight from that list's publisher, under that publisher's terms. Antelao does not hold, mirror or serve list data, so the service needs outbound HTTPS to the hosts each list's card names in the console. See Outbound access.

The same foundation as GeoIP and Fail2Ban​

The console, its accounts and roles, the API keys, backup and restore, the mail settings, the support traces and Security > Firewall and Security > Threat protection work as they do in the other Antelao services. See The console and Firewall and threat protection.

Where to start​

Install it, then reach the console, then point your forms at the checks. When something does not work, start at Troubleshooting.

Last updated on