Re: blocking Asian IPs?
Hallo und guten Tag Andy, Heute (am 24.06.2005 - 15:38 Uhr) schriebst Du: > When I read this I thought it's overkill but in the meantime and after > looking at my logs (not only from SA but also ssh-attacks) I DO think that > it's a good idea to block these IPs. take a look at http://www.pettingers.org/code/SSHBlack.html I use this and I`m very happy. ;) -- Viele Grüße, Kind regards, Jim Knuth [EMAIL PROTECTED] ICQ #277289867 PGP Fingerprint: 54C9 1A46 D3B2 95B6 454D 74FA AC73 773E 1F78 066F -- Zufalls-Zitat -- Das beliebteste Haustier der Deutschen ist und bleibt das halbe Hähnchen. (Lutz Hager Amherst) -- Der Text hat nichts mit dem Empfänger der Mail zu tun -- Virus free. Checked by NOD32 Version 1.1152 Update 23.06.2005
Re: blocking Asian IPs?
You might want to take a look at this: http://www.blackholes.us/ Very useful for inclusion into RBLs if you so desire. I myself am not very keen at all on blocking entire countries, but the option is there if you need/want it. Regards, Martyn Andy Spiegl wrote: Hi Carlo, back in May you wrote: Moreover, you might want to firewall (or reject their mail otherwise before it reaches spamassassin) all of South Korea and all of China -- that will reduce the ammount of spam you receive with about 99% ... So, it is more than worth it. When I read this I thought it's overkill but in the meantime and after looking at my logs (not only from SA but also ssh-attacks) I DO think that it's a good idea to block these IPs. Is the list of IPs you had included deducted from you logfiles or did you find a somewhat official list of networks in Asia? Do you maybe already have an updated list? There is one Korean IP that's bothering me incredibly these days with hundreds of thousands of ssh-connections: 220.65.232.100 But I didn't find it on your list although it's Korean. So maybe I just misunderstood you. Thanks in advance, Andy. -- Martyn Drake http://www.drake.org.uk http://www.drake.org.uk/hosting http://www.ourlittleduckling.com
blocking Asian IPs?
Hi Carlo, back in May you wrote: >Moreover, you might want to firewall (or reject their mail >otherwise before it reaches spamassassin) all of South Korea and >all of China -- that will reduce the ammount of spam you >receive with about 99% ... So, it is more than worth it. When I read this I thought it's overkill but in the meantime and after looking at my logs (not only from SA but also ssh-attacks) I DO think that it's a good idea to block these IPs. Is the list of IPs you had included deducted from you logfiles or did you find a somewhat official list of networks in Asia? Do you maybe already have an updated list? There is one Korean IP that's bothering me incredibly these days with hundreds of thousands of ssh-connections: 220.65.232.100 But I didn't find it on your list although it's Korean. So maybe I just misunderstood you. Thanks in advance, Andy. -- o _ _ _ --- __o __o /\_ _ \\o (_)\__/o (_) -o) - _`\<,__`\<,__>(_) (_)/<_\_| \ _|/' \/ /\\ (_)/ (_) (_)/ (_) (_)(_) (_)(_)' _\o__\_v Great spirits have always encountered violent opposition from mediocre minds. - Albert Einstein
