On Sat, 18 Nov 2006 19:45:30 +0100 "MK [ [EMAIL PROTECTED] ]" <[EMAIL 
PROTECTED]>
wrote:

> just curious about this:
> 
> i noticed, that some mailserver loctaed in europe were blocking mails
> from specific subnets at all - for example saying something like
> "550 we do not accept mails from china" for mails from 60.16.x.x range...
> 
> is someone on this list using this kind of an "IP range blacklist" which
> is completely blocked by its MTAs - and, if so, which IPs are blocked -
> and why?

I don't (yet) block complete countries but if that's what you're looking
for then look at http://countries.nerd.dk/

It *IS NOT A BLACKLIST* !!!!

It is just a list. What an administrator does with it is up to that admin. 

Just like all the other lists. SpamCop doesn't block anybody. SpamHaus
doesn't block anybody. MAPS doesn't block anybody. Etc.

They just provide lists that meet certain criteria and make them publicly
available. Some administrators use them to block certain sites. Others use
them to modify spam scores with spamassassin rules. NONE of them are
BLOCKING lists. They are just lists.  There's even one out there that lists
every IP address in IPv4 and IPv6 address space.

If you are being blocked based on a "spam type" list like SpamCop you need
to find out why you are on the list and try to get removed. If you are
being blocked by a "generalized" list (list of countries, list of ISP
dynamic netblocks, etc.) then you need to contact the ADMIN THAT IS
BLOCKING you and ask to be whitelisted around the block. You can't get
removed from a generalized list because they aren't based on controllable
behavior, they are based on the physical characteristics of your connection
to the Internet.

I use SpamCop as an absolute blocking list because they are very good about
automatically de-listing sites when spam reports stop and they are easy to
get de-listed from manually when you fix a spam problem. But, I have a few
IP addresses whitelisted around the spamcop check because some places that
don't generally send spam get listed because of the nature of their
business. Mailing list sites get listed because many people are too stupid
to figure out how to unsubscribe from a list they joined. they just start
reporting list mail as spam. I also have a server farm called
bigfootinteractive.com whitelisted because they handle commercial mailings
for many large U.S.A. companies like Walgreens, Northwest Airlines, Capital
One Financial, and others. People open accounts at these companies and
request their "newsletters" then when they decide te newsletter
(advertising) isn't what they expected they start reporting it as spam
rather than just READING the email to find out how to stop them from being
sent.

I have considered blocking entire contries like .kr and .cn and .br because
my customers NEVER get legitimate mail from those countries and they
account for a CONSIDERABLE amount of the spam that comes in. If I can drop
all connections from them at the SMTP envelope level it's just that much
less work that amavisd-new has to do.

I can whitelist certain IP ranges around those blocks easily so if there is
a legitimate mail sender they only need to contact me through alternate
means (I maintain gmail addresses for this purpose) to be whitelisted.

In fact, after typing this, I think I'll go work up an announcement to our
customers and have a few country-wide blocks implemented by next weekend.
Thank you for prompting me to add another layer to our spam blocking.

Gerald

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to