I have checked the IP info from APNIC and blocked several IP nets at my firewall. I am getting hit with email from a 211.x.x.x block that is from a Korean Domain but 211.x.x.x does not appear to be part of the allocated block.
Do Korean domains have to be registered in the allocated block? FYI this is part of the header. Received: from mail.tv-magazine.co.kr [211.218.249.201] Mike Odryna Owner LakeSpeed.Com http://www.lakespeed.com (603)635-8700 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, December 10, 2004 11:56 AM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] blocking spam from Korean >Our Spam filter and rules are working great - but our Admissions >director is getting as many as 500 spams a day from Korea - some in >English, some not. They change ip addresses so regularly, I haven't >been able to block them for long. > >I heard from Tech. Support that there is a range of ip addresses that >basically covers Korea. They suggested posting to the forum. Anyone >know anything about this or have an idea? You can get the raw data from APNIC, and extract what you need -- but it's a lot of work. If you're running Declude JunkMail Pro, you can use the geolocation feature, which can let you either block all E-mail from Korea, or have E-mail from Korea count towards the weight of the E-mail. If you aren't running Declude JunkMail Pro, and are running anti-spam software that lets you use DNSBLs, you can use korea.blackholes.us. They also list their zone file, so you can get the IP ranges from there instead of via APNIC. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. ---- This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
