Paul Cartwright put forth on 12/7/2010 4:10 PM:
> On 12/07/2010 04:48 PM, Steffan A. Cline wrote:
>> CIDR blocking all of China with an auto whitelist for those that you email
>> directly?
> I don't know anyone in China, I know someone who travels there, but he
> has a Bellsouth address..
> so how do you implement CIDR blocking?? well I see where you can add a
> hash file, but all I see are IP ranges, not *.cn .

To IP block all of China:

wget http://ipdeny.com/ipblocks/data/countries/cn.zone

sed 's/$/ REJECT/g' cn.zone > /etc/postfix/china.cidr

smtpd_recipient_restrictions
        ...
        check_client_access cidr:/etc/postfix/china.cidr
        ...


-- 
Stan


Reply via email to