Rainer Duffner wrote: [..] >> You do mean as a scoring method I hope... > Yes, but we also block. Mostly dynamic IPs and stuff on the swinog/IX-RBL. > > On my own mailserver, I block all Asian IPs ;-)
Well, then this should make your firewall a lot happier I guess: 8<----------------------------------- wget -O - http://www.iana.org/assignments/ipv6-unicast-address-assignments/ipv6-unicast-address-assignments.txt| grep APNIC | awk '{print $1}' 2001:0200::/23 2001:0C00::/23 2001:0E00::/23 2001:4400::/23 2001:8000::/19 2001:A000::/20 2001:B000::/20 2400:0000::/12 ---------------------------------->8 Do realize that that also includes Australia, and a lot of other Asian countries as APNIC covers a lot more. But yes, much simpler to block on /32 boundaries. Though I really do not see why one would want to block the countries where great tech comes from. Just use an RBL, and solely use it for scoring... (and do SMTP-REJECT-AT-DATA of course) Greets, Jeroen
signature.asc
Description: OpenPGP digital signature
_______________________________________________ swinog mailing list [email protected] http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
