How to block all email from Korea:
ich...@ak47.algebra.com
email from Korean spammers.
igor
211.32 550 you are a spammer, go away 095b5b906811eda5195fca14712d294b
211.33 550 you are a spammer, go away b913368b73abadbb8889068b99937af9
211.34 550 you are a spammer, go away 2fa11aae4866b5283ae13d1175b95c94
211.35 550 you are a spammer, go away 8f8212d08ffa345d3257539f995dd2fd
211.36 550 you are a spammer, go away b6aec3a9fa6559ba1ac53407fa50dc4e
211.37 550 you are a spammer, go away 08ac7e19a8a2c0994334bb0940e06a09
211.38 550 you are a spammer, go away aae5079db69dec03edf226dfb8c0f69b
211.39 550 you are a spammer, go away 6ef53f5c432f1612340275015c14ca48
211.40 550 you are a spammer, go away 4de5b16356be72950fdbbf9af755579d
211.41 550 you are a spammer, go away 74503c23b16beffba64cea35acf060ea
211.42 550 you are a spammer, go away 68827fcd32738519d457ec8f9e9ce981
211.43 550 you are a spammer, go away 9a51b36118e02aace869b758b44e8a85
211.44 550 you are a spammer, go away 92fa8eafe39cb745249672fff9b1b5b6
211.45 550 you are a spammer, go away baf2c2d91f9fb48188b0fc859dc1e231
211.46 550 you are a spammer, go away abca7fb89672fb826135599f4304d9d9
211.47 550 you are a spammer, go away 964443b2f69881ca01e9aeeea5a76dbc
211.48 550 you are a spammer, go away f6d75c0d4b9af4617d9c69b5a2f0b434
211.49 550 you are a spammer, go away e97b1df627c468487be321b197f70046
211.50 550 you are a spammer, go away 9163cf5d072c83ca6f42e5409ca678c5
211.51 550 you are a spammer, go away 688eeda6458a795512431189314fce96
211.52 550 you are a spammer, go away a1f08d2dd7f8c1052c733378920b5999
211.53 550 you are a spammer, go away ca30acea5709ebab480b1fc213e4988f
211.54 550 you are a spammer, go away 710da8184ad8512e80e05458edea6259
211.55 550 you are a spammer, go away 91667c9ff32c319e1c0058cbfe88090e
211.56 550 you are a spammer, go away 6a89628fa765e9a1c956586b9226af5d
211.57 550 you are a spammer, go away d03a0eb73798a53e7fc26bb6a7ca554b
211.58 550 you are a spammer, go away 2104b507b6699588a699ca3451b2d42b
211.59 550 you are a spammer, go away 0f67a3757530fc00cd8551fdd107d376
211.60 550 you are a spammer, go away f374ea6fc252dcd69ea4158afe367aec
211.61 550 you are a spammer, go away 4336c69b7b422c3dc51665b2c6271d01
211.62 550 you are a spammer, go away a369106c9eb44096d9aca72898de36b5
211.63 550 you are a spammer, go away 525badec46dc0ad0b1922c5b4525eaa4
211.64 550 you are a spammer, go away 16ded9a6af5fbea1f71b32897266c458
211.65 550 you are a spammer, go away 3eb4ef5421cf154422516e1e6b6feeb2
211.66 550 you are a spammer, go away a10c360f798113255d9f5eb839bcca35
211.67 550 you are a spammer, go away 677cad73e28825d35f355e0fa00ba51a
211.68 550 you are a spammer, go away 88c40f3263e831e9f15f5ebbb796fdb3
211.69 550 you are a spammer, go away df500bff709adf5f58970c08761a4b1b
211.70 550 you are a spammer, go away aa980e386426877447a25bee7360e8d3
211.71 550 you are a spammer, go away 09dfe0c611b1ebf429939649e84f3a62
211.72 550 you are a spammer, go away 7a33c392d1e1189d357a7a5510e2bfb1
211.73 550 you are a spammer, go away 00c2110830c8718984b4dcd8e78b2f54
211.74 550 you are a spammer, go away 35409fd3cef94a61f4b04613af4a1c3d
211.75 550 you are a spammer, go away acd2fedfd3101cda715493b2d6d2f5e9
211.76 550 you are a spammer, go away 04ef93ade65f50a6553f94497ef0f3e5
211.77 550 you are a spammer, go away 03f844d24e3aa5b0710c0d8a68d578e0
211.78 550 you are a spammer, go away 2850887d98b1df6af0343f7060dbf719
211.79 550 you are a spammer, go away 3d3a58189bd66ef1b5af0bf7d449b2c9
211.80 550 you are a spammer, go away 6fcb851a1f29947b950ca0993989fdc2
211.81 550 you are a spammer, go away 492830f123b65d6869fe39b136ee88cf
211.82 550 you are a spammer, go away cde0da73e0ef5b6cde22ca737ba6d1b0
211.83 550 you are a spammer, go away 1994e37c952fe10a1ec1bf23bcb9ac20
211.84 550 you are a spammer, go away e5b213cc4b4ad4307ee04375566906ed
211.85 550 you are a spammer, go away 3820b7391f534489ad20fd5d0d51430a
211.86 550 you are a spammer, go away f480c6cee5270df328983407df794b8c
211.87 550 you are a spammer, go away 3a8447d8f338c8b172ab835f50dc5bbf
211.88 550 you are a spammer, go away 35dd10d4ab5cc27cc88301a540fcc74b
211.89 550 you are a spammer, go away 61fa8a70ebed4f6fd23cfba9165b0b89
211.90 550 you are a spammer, go away 11f7b390c7e6dd3b9f41b046588716e3
211.91 550 you are a spammer, go away 36f4c573cf4012a366ec45a2314f1a85
211.92 550 you are a spammer, go away 1352de7ab3819ada168b82452d2e8242
211.93 550 you are a spammer, go away b3fe65e9024e574b8b879b392894b45b
211.94 550 you are a spammer, go away ea7f3e928265c16963bb5e37c17e416c
211.95 550 you are a spammer, go away bf26eb17d9a13f44900fe9e387f777df
211.96 550 you are a spammer, go away ba9b9bb2f4ce047ee5dc41795e58ba8d
211.97 550 you are a spammer, go away da32054462e4db630a7fc01d49c46bc9
211.98 550 you are a spammer, go away bbc86396bcc7d87b9d77668b9b9bdcdf
211.99 550 you are a spammer, go away be7eef1d13c3fe2ffa426e9314e9f9be
211.100 550 you are a spammer, go away 2e55c6861f733c4475eb3b9870cd82c0
211.101 550 you are a spammer, go away abdc516b58795a9e1541add74a1209fe
211.102 550 you are a spammer, go away 20ebfa13bcd0a10bd8fc437f1366135a
211.103 550 you are a spammer, go away ee73b03beb5a49ae24a0a79c78aadb2a
211.104 550 you are a spammer, go away 4134b05f4732608953f151bca0affa2d
211.105 550 you are a spammer, go away 059aabd44ed24c2bef30d20e1ba6d64d
211.106 550 you are a spammer, go away 55c4a2b0bd4eaea9d5a94a382f936893
211.107 550 you are a spammer, go away e146b669b7f75e745cb7e0cf5ddfa313
211.108 550 you are a spammer, go away 8b7c65bd999b3fcd63c0141c075c82d6
211.109 550 you are a spammer, go away eef06e27bf1ab1096e4e592f430f1ea4
211.110 550 you are a spammer, go away 9f23da2f7132b107492a3e35e98577c2
211.111 550 you are a spammer, go away 52964e1ca862305cc99944590c01f60b
211.112 550 you are a spammer, go away 9691033d1b19f017f6f0df5db5111aca
211.113 550 you are a spammer, go away c106259aece0d49cf7fa4c64b7f20998
211.114 550 you are a spammer, go away 3d6a029a98b4b6107da112a8b6f8ccfd
211.115 550 you are a spammer, go away db76c7d49417fdbe968c3e3b19ab85a5
211.116 550 you are a spammer, go away d4650a42fdbec884eacbbfc612550021
211.117 550 you are a spammer, go away ecab5af7ab2eb1abd770db17a1b4aeec
211.118 550 you are a spammer, go away 888a807f9f9588d01ac1f04b977b690f
211.119 550 you are a spammer, go away 09bfed2dea4dd91ce1cf843b97736217
211.120 550 you are a spammer, go away 78c2b6379f33560ae7cc05a8bf7e742c
211.121 550 you are a spammer, go away 01dca8ad1da0d6f6bee54907eb9091b9
211.122 550 you are a spammer, go away fa95d6999b473697b1b3dc3043662a6b
211.123 550 you are a spammer, go away 86788bcb94ed25966957eaf49da2c9b8
211.124 550 you are a spammer, go away 4e35b6cc75ce0755cc88d0eb8e7e2755
211.125 550 you are a spammer, go away 2e0cb818ad99aa23026a75eb0c26108b
211.126 550 you are a spammer, go away 474739716cbb738cb52736cc140e111a
211.127 550 you are a spammer, go away 1e1015d30b276bd543a8c34ded804bf8
211.128 550 you are a spammer, go away 9273d5d6d6397d9b4a3a7bf127dd094e
211.129 550 you are a spammer, go away 06e1b68df46d65c51a3f4423dde61221
211.130 550 you are a spammer, go away 382907c319c5b14abe2ff523e861a923
211.131 550 you are a spammer, go away 76a49d346334a7e851ede6f3967a1de6
211.132 550 you are a spammer, go away 3f9f3eb223e61d318806b45fbd4c52d7
211.133 550 you are a spammer, go away 35e338c5dea66b61e2fd48b8321b4dde
211.134 550 you are a spammer, go away 845ae38ea1d07d07b682783ae4ed2a67
211.135 550 you are a spammer, go away 1d7735e0b76b49e6c68881602b89ccaf
211.136 550 you are a spammer, go away d6b0d349ed3118f7b412f8ed05c70b50
211.137 550 you are a spammer, go away 9a6bd11b2b4c5592ddeda6ec1c0abb31
211.138 550 you are a spammer, go away c7d1b7beb93cd2996e7f1c6e668c372f
211.139 550 you are a spammer, go away 5b55ad0e190c45eaeda99529ad2d994c
211.140 550 you are a spammer, go away ee927c04e3695216ea5ddbacfb716bea
211.141 550 you are a spammer, go away 5cd7f8a7ca37148b40abb7e34dad5337
211.142 550 you are a spammer, go away 45d933aebad898418e21bc429c1f5721
211.143 550 you are a spammer, go away c613ecb501776a1903b8ca19aafae45b
211.144 550 you are a spammer, go away 7eeb698aa3f1dedbe3b028bcd31f7a92
211.145 550 you are a spammer, go away 17fbe986c9e9d2793a67ba68210830a7
211.146 550 you are a spammer, go away 2d8205d107a10e5b78dcc4ef2fa03cef
211.147 550 you are a spammer, go away 21d2cb011f869a081377b311d12ff772
211.148 550 you are a spammer, go away 27d94012b8afc9ebd262045195dcd40f
211.149 550 you are a spammer, go away b525c5a5002a80891cb42b303295d8bf
211.150 550 you are a spammer, go away dbd09d50fc78e2b15dfd1a8396dd2a34
211.151 550 you are a spammer, go away ec0ec55a3f74f0d307e8131750869198
211.152 550 you are a spammer, go away 2fc7154ff710db03319267fe6ca69aae
211.153 550 you are a spammer, go away 5a7c2c53b5cfe63204cec14adb7fa6b0
211.154 550 you are a spammer, go away 8b97ecaac4aec580b3e912022d55dfad
211.155 550 you are a spammer, go away dc1e0aac69cd491e81a6d793a05fff74
211.156 550 you are a spammer, go away b8fcb5ada325a9dc2a542f3dbce0d3b1
211.157 550 you are a spammer, go away 90b9378a3bd6a9325f1b8808766df495
211.158 550 you are a spammer, go away 3f7cb2b506a85e61e39bf28dfdf0c40a
211.159 550 you are a spammer, go away 2f4c143f5b1f3ca28c850a13637d0f0e
211.160 550 you are a spammer, go away 3706b5b36d209699971d4bedce28d79a
211.161 550 you are a spammer, go away 5f3105e507125008e77526a6e58f561a
211.162 550 you are a spammer, go away 22141ecafdb13a2025c76d53506d79a0
211.163 550 you are a spammer, go away a1289060b2146cd702dad7292d8f80c5
211.164 550 you are a spammer, go away c77b9301016ec1fe570429f48a48632f
211.165 550 you are a spammer, go away 2c264535f76d60350144cf901e01e64b
211.166 550 you are a spammer, go away d588791f6376c4243a7c27aa2d52ea2d
211.167 550 you are a spammer, go away ff174d982ad5483f8c8f841c2ab6e1d3
211.168 550 you are a spammer, go away 75e6315ec4b5ddefe9da639afb24d384
211.169 550 you are a spammer, go away f8bdf7dd55874bbdba25761d4cd3a290
211.170 550 you are a spammer, go away 80d6db43bb981704685548fbfea41322
211.171 550 you are a spammer, go away b735d10bdde4da96e42e73e9231f6575
211.172 550 you are a spammer, go away eea7a66f7b95641262a85a7f24d87889
211.173 550 you are a spammer, go away ddad14b1fcd12637533a76253a80ad50
211.174 550 you are a spammer, go away 1dd8ff2ba8b03a05c4882ad8924122c2
211.175 550 you are a spammer, go away def07fa7a6d7a3a0b6c1b7c4ba6690fd
211.176 550 you are a spammer, go away 482121aa9776279b68187bfb88628a1c
211.177 550 you are a spammer, go away ad8952fc28c3693ab7d1b85021eb6954
211.178 550 you are a spammer, go away a5ff1201965437fca8216d5259c3bbc2
211.179 550 you are a spammer, go away 12b1cd8428d94b13982b0e468d689140
211.180 550 you are a spammer, go away 0e5846847987231bf67527b72418a138
211.181 550 you are a spammer, go away 78f3d30230dacd6c328c18312e94c546
211.182 550 you are a spammer, go away 83e633263d4da9857fe044c5f01df790
211.183 550 you are a spammer, go away b7b576401252eb89dc3e6b564cf284f7
211.184 550 you are a spammer, go away 5074873ee9e65102f2988c172e87f299
211.185 550 you are a spammer, go away a92d3a4fa92bbab1419fea254f0e7171
211.186 550 you are a spammer, go away d8f7d1fefcfb365157e7139da68c41b5
211.187 550 you are a spammer, go away 9ae85d140ceb9f173b9b0e64745eadfe
211.188 550 you are a spammer, go away 95791207ec064d8b7ddce2d40b963c1e
211.189 550 you are a spammer, go away 2e8b96701664edba99824f7254a6c702
211.190 550 you are a spammer, go away 9808406d457a638bfd4b5af073e4eb62
211.191 550 you are a spammer, go away 733593d2f0bf924db14f1bef7b21da13
211.192 550 you are a spammer, go away 2380d27f745b0b15aa47b74fce96d74e
211.193 550 you are a spammer, go away 86f8589932882f4908e60de37e0fe6a5
211.194 550 you are a spammer, go away a797b773f3db5ede0fc628bba276549c
211.195 550 you are a spammer, go away b26a84ab1045fe43154e1e654352a557
211.196 550 you are a spammer, go away 7143f7bdfc844858733b7f5667a79c97
211.197 550 you are a spammer, go away 50ea02692db7149d9ef30755ce119a4f
211.198 550 you are a spammer, go away 1ae0c6d122b1568a74d9ce38721680ab
211.199 550 you are a spammer, go away ae2cee5e18022042a3e6811c42240333
211.200 550 you are a spammer, go away 295980a87e70703a7346e321d1fd2f7d
211.201 550 you are a spammer, go away 6a96e414754c4d5699f38eca29a56cd8
211.202 550 you are a spammer, go away acbedb1b31e7d43923e1948a516be38d
211.203 550 you are a spammer, go away 6081640e751527e21f9658eeba64b235
211.204 550 you are a spammer, go away cada442d31843b07bec6b71e256cd931
211.205 550 you are a spammer, go away b508ee4517f9cefefd2dbc1ff3abc888
211.206 550 you are a spammer, go away 355f023d251ce2b1fd8b9ccb246039fe
211.207 550 you are a spammer, go away a2c88e5fe4abe6436d72ec9e3741b051
211.208 550 you are a spammer, go away 96842d254186945b74115978280241df
211.209 550 you are a spammer, go away b22945609fb63ab2e5e899090deb9195
211.210 550 you are a spammer, go away 438bda2bb860f494360b1c779530ac91
211.211 550 you are a spammer, go away c3e375d13b32680be95f03ce33787f6d
211.212 550 you are a spammer, go away d2180f46798142437f71c42d795ec34c
211.213 550 you are a spammer, go away d8d50be387d5c596eab99e85116d9300
211.214 550 you are a spammer, go away b158b5891293a14d0c2e8a08428b679c
211.215 550 you are a spammer, go away 802e6bacee26b8e0d5a2db529fb1deaf
211.216 550 you are a spammer, go away 5162f902355ab845694b701408db01cb
211.217 550 you are a spammer, go away f9d1a8d8089cd435ed11bedfc8c79ae6
211.218 550 you are a spammer, go away fb500c79b6c3de7eb887e7b293064b59
211.219 550 you are a spammer, go away 5a6b185e1b576cf593ee22f52ae0c1e0
211.220 550 you are a spammer, go away 630dc3d5015f25e904b96ac77220d658
211.221 550 you are a spammer, go away c83ceede3cda5c614fc9dbd63cafad24
211.222 550 you are a spammer, go away 180fe20adeaa36645e5e5a4416a39e69
211.223 550 you are a spammer, go away fe09214dcd6c7996c3242335777c35af
211.224 550 you are a spammer, go away 9cfb15761aa651eeed82767168c21863
211.225 550 you are a spammer, go away beed05fcea444d6e84ada55292790295
211.226 550 you are a spammer, go away bfd4431c45d15315000fc1a3db56637d
211.227 550 you are a spammer, go away 85c08b77b8f137244e0c3b1820d2f135
211.228 550 you are a spammer, go away 60d913a9a818d3085c2de041d968ee34
211.229 550 you are a spammer, go away f6bd78382d3d64884297eee69df3554b
211.230 550 you are a spammer, go away 8a4d53a7c153b671dd2ccbd72aaea95d
211.231 550 you are a spammer, go away 12a5142150ef18b3d2d1a6996b6029d8
211.232 550 you are a spammer, go away bc12525512a78e467d40ec1d9d4a4495
211.233 550 you are a spammer, go away 41bb2c7edea229649dc627f46a67983c
211.234 550 you are a spammer, go away 7cefa7bcd5326abf74025568007b858b
211.235 550 you are a spammer, go away 6f94f5b2ed616c9f4e4274ef44abefed
211.236 550 you are a spammer, go away 1dada4e0dfe1e93d0f677608d268781e
211.237 550 you are a spammer, go away 8d5eeb779fb5aa38f51fafb71c268f56
211.238 550 you are a spammer, go away 67918770d2f1b612c98934c743b17b38
211.239 550 you are a spammer, go away 52fd2cbb7e584baa1ab8c1f594f9a2e0
211.240 550 you are a spammer, go away b8ca92e7267d98f50399b3f233e3c22a
211.241 550 you are a spammer, go away 71aad060ca69a8091cc775d7c3886884
211.242 550 you are a spammer, go away 4bcefe67a2c180ac1d006350d0f8694a
211.243 550 you are a spammer, go away aca77b8a3c7b446c0dea7c2da5efd2b9
211.244 550 you are a spammer, go away 853bf07f713c3060f080ec415361d698
211.245 550 you are a spammer, go away 8cec85afab37cd62a3305ce77bf30646
211.246 550 you are a spammer, go away 8f21184647fe5d89090875df5807c325
211.247 550 you are a spammer, go away d7022a65398e4394fb31ea50de39e2e8
211.248 550 you are a spammer, go away 8534a43d5805659e72c82a0292df4e4d
211.249 550 you are a spammer, go away 412903851dd77c30419c943a140c5bcf
211.250 550 you are a spammer, go away 16e4951c01c12e3a10b2baa99801646d
211.251 550 you are a spammer, go away 2db3f615b31867f2e4cdd638b662e61a
211.252 550 you are a spammer, go away 1db4529c6ad092f7fd5771aebe26290e
211.253 550 you are a spammer, go away a9736eecad928c76d5eaa969801a5961
211.254 550 you are a spammer, go away 43e0305ba47ce23dd910899e57211b46
211.255 550 you are a spammer, go away d374b954f9f81d6a7b92dddac2295a41
Jean-David Beyer
>
> Just add this to your access.txt and you will no longer receive any
> email from Korean spammers.
>
> igor
>
> 211.32 550 you are a spammer, go away 095b5b906811eda5195fca14712d294b
> 211.33 550 you are a spammer, go away b913368b73abadbb8889068b99937af9
> 211.34 550 you are a spammer, go away 2fa11aae4866b5283ae13d1175b95c94
What is the purpose of the stuff like 2fa11aae4866b5283ae13d1175b95c94 ?
--
.~. Jean-David Beyer Registered Linux User 85642.
/V\ Registered Machine 73926.
/( )\ Shrewsbury, New Jersey http://counter.li.org
^^-^^ 5:10pm up 14 days, 5:27, 5 users, load average: 2.22, 2.68, 2.52
ich...@ak47.algebra.com
Jean-David Beyer <jdb...@exit109.com> wrote:
>ich...@ak47.algebra.com wrote:
>>
>> Just add this to your access.txt and you will no longer receive any
>> email from Korean spammers.
>>
>> igor
>>
>> 211.32 550 you are a spammer, go away 095b5b906811eda5195fca14712d294b
>> 211.33 550 you are a spammer, go away b913368b73abadbb8889068b99937af9
>> 211.34 550 you are a spammer, go away 2fa11aae4866b5283ae13d1175b95c94
>[snip]
>
>What is the purpose of the stuff like 2fa11aae4866b5283ae13d1175b95c94 ?
That's the MD5 hash of the entry that is being rejected. It is reported
back to the user as part of the rejection message. That way, if I
blacklist some host that actually really wants to talk to me (and I want
to receive email from it), I can find out which entry inmy access.txt
caused the rejection, and adjust the entry accordingly.
igor
William Park
> 211.32 550 you are a spammer, go away 095b5b906811eda5195fca14712d294b
> 211.255 550 you are a spammer, go away d374b954f9f81d6a7b92dddac2295a41
How did you determine the IP ranges? I want to find out IP ranges for
China and Japan.
--
William Park, Open Geometry Consulting, <openge...@yahoo.ca>
8 CPU cluster, NAS, (Slackware) Linux, Python, LaTeX, Vim, Mutt, Tin
ich...@ak47.algebra.com
> ich...@ak47.algebra.com wrote:
>> 211.32 550 you are a spammer, go away 095b5b906811eda5195fca14712d294b
> ...
>> 211.255 550 you are a spammer, go away d374b954f9f81d6a7b92dddac2295a41
>
> How did you determine the IP ranges? I want to find out IP ranges for
> China and Japan.
>
by typing dig -x and extending the range...
I am not saying that I invented the best way to do it, but so far,
not a single Korean spam today. I also trash all messages with a ą
sign in the Subject:, via procmail.
igor
Boo
news:a94mbm$9un3$1...@ID-99293.news.dfncis.de...
> ich...@ak47.algebra.com wrote:
>
> How did you determine the IP ranges? I want to find out IP ranges for
> China and Japan.
>
I'm no Sendmail wizard, so there maybe some benefits to blocking
in Sendmail that I'm overlooking, but this seems a whole heck of a
lot easier way:
iptables -A input -i eth0 -p tcp --dport 25 -j DENY 211.128/9 -l
iptables -A input -i eth0 -p tcp --dport 25 -j DENY 211.64/10 -l
iptables -A input -i eth0 -p tcp --dport 25 -j DENY 211.32/11 -l
and, if you need to open holes, you can do it by inserting something
like this BEFORE the DENY lines:
iptaples -A input -i eth0 -p tcp --dport 25 -j ACCEPT 211.x.x.x/24
Also, to find the IP blocks in APNIC by country use these links:
http://www.apnic.net/apnic-bin/ipv4-by-country.pl?country=cn
http://www.apnic.net/apnic-bin/ipv4-by-country.pl?country=kr
http://www.apnic.net/apnic-bin/ipv4-by-country.pl?country=jp
http://www.apnic.net/apnic-bin/ipv4-by-country.pl?country=vn
Just change the country code in the URL to pick out the country
you want. The links above give you China, Korea, Japan, and
Vietnam, which are four of my favorites.
I've found that a combination of using the SpamCop blacklist
and some handy-dandy iptables blocks against China, Korea,
Japan, Taiwan, Argentina, and Costa Rica have eliminated over
95% of the spam my customers and I were receiving. So far this
week, I've personally received only 3 spams, even though I have
numerous email addresses, some of which have been active for
more than 3 years!
Of course, you have to be careful with geographic blocks. Your
customers may have traffic or connections important to them
from some of those areas. But, mine have been delighted to trade
the loss of a few minor connections for nearly spam-free inboxes.
William Park
> "William Park" <openge...@NOSPAM.yahoo.ca> wrote in message
> news:a94mbm$9un3$1...@ID-99293.news.dfncis.de...
>> China and Japan.
>
> I'm no Sendmail wizard, so there maybe some benefits to blocking
> in Sendmail that I'm overlooking, but this seems a whole heck of a
> lot easier way:
>
> iptables -A input -i eth0 -p tcp --dport 25 -j DENY 211.128/9 -l
> iptables -A input -i eth0 -p tcp --dport 25 -j DENY 211.64/10 -l
> iptables -A input -i eth0 -p tcp --dport 25 -j DENY 211.32/11 -l
Hmm, the syntax is for IPchains not for IPtables. For IPtables, it goes
something like, assuming eth0 is your Internet connection,
iptables -A INPUT -i eth0 -p tcp --dport 25 -s 211.128.0.0/9 -j DROP
iptables -A FORWARD -i eth0 -p tcp --dport 25 -s 211.128.0.0/9 -j DROP
>
> and, if you need to open holes, you can do it by inserting something
> like this BEFORE the DENY lines:
>
> iptaples -A input -i eth0 -p tcp --dport 25 -j ACCEPT 211.x.x.x/24
>
> Also, to find the IP blocks in APNIC by country use these links:
>
> http://www.apnic.net/apnic-bin/ipv4-by-country.pl?country=cn
> http://www.apnic.net/apnic-bin/ipv4-by-country.pl?country=kr
> http://www.apnic.net/apnic-bin/ipv4-by-country.pl?country=jp
> http://www.apnic.net/apnic-bin/ipv4-by-country.pl?country=vn
Excellent, thanks.
>
> Just change the country code in the URL to pick out the country
> you want. The links above give you China, Korea, Japan, and
> Vietnam, which are four of my favorites.
--
Boo
Well, so it is.
I've had iptables on my mind due to the new server I'm trying to get
configured. I'm a one-year old Linux newbie, but an old guy, and I
guess I had a brain fart. I find that happens more frequently than I'd
like, these days. I can't remember names of people, either.
"Igor5882" <ignora...@NOSPAM.5882.invalid> wrote in message
> * iptables -A input -i eth0 -p tcp --dport 25 -j DENY 211.32/11 -l
> This is awesome, thanks.
. . yer welcome . . .
> did not know that vietnam was spamming...
As I recall, I included Vietnam due to repeated port
22 and port 111 exploit scans, plus some probes
for insecure web CGI's from the same ips.
> Otherwise, here's soemthing that I wrote:
<SNIP CODE>
I understand just enough shell scripiting to be able to
work that out, but for the time being, I still like to add my
blocks by hand. I tend to annotate the script, so later on,
I can see why a particular block is included. That makes it
easier to change my mind intelligently.
I totally block China, Japan and Korea, but this evolved
from merging a series of individual blocks, which each arose
from individual attacks and spams. I finally came to the point
of realizing that the ratio of garbage to legit traffic from those
countries approached infinity.
And, I still add various ARIN netblocks for those countries, as
I have attacks or spams from them (killed a /15 for Taiwan
this morning) but again, those are reponses to specific traffic.
> Where do you find argentina IPs, I want to block them.
If ARIN has an listing of blocks by country, I haven't been able to
find it, and I've looked. Ipindex.net used be of some use, but went
offline for unknown reasons. The guy who did it recently put up a
"coming back real soon now" page, but that's all. My Argentinian
blocks are responsive. When I get an attack scan or piece of spam,
I block all the entire ip block for that address.
> I do not like blacklists in general because they get politicized. Not
> sure about the spamcop one but I am not holding my breath.
Not sure what you mean, precisely. I know that they get sued a lot.
I guess they'll all eventually end up in some like where few lawyers live,
like SPEWS in Siberia, or wherever it is. But spamcop is a very
dynamic list: addresses roll off after a short period of time, but come
back on as soon as spam starts flowing. Frequently, the block is
up before the spam run is finished, especially for previous list members.
So far as not liking DNSbl's, to each his own. Some people think that
it's geographicly based blocks that are a crime against humanity. Me, I'd
like an Internet utopia, where everyone can talk to everyone else, nicely.
Failing that, I'd like fewer spams and scans and hacks and will use both
DNSbl's and geographic blocks to achieve that, so long as I can do so
with negligible impact on desirable traffic.