That being the case I seem to have a problem ... I have blocked 211.158.49.39/24 as
211.158.49.39/24 (FYI, it's better to write it as "211.158.49.0/24", setting the non-significant numbers to 0) is the range from 211.158.49.0 through 211.158.49.255. But:
211.158.43.177 211.158.49.39 211.158.40.36 211.158.92.125 211.158.85.160
Only one of these falls in the range from 211.158.49.0 through 211.158.49.255.
The easy way to handle this would be to block the Class B range from 211.158.0.0 through 211.158.255.255, by using "211.158.0.0/16". The more thorough way would be to go to www.DNSstuff.com and enter one of the IP addresses into IPWHOIS, to block the exact IP range that was allocated (to prevent blocking too much or too little). However, it shows that those IPs are allocated to 3 separate IP ranges, so you're dealing with a nasty situation. The good news is that 211.158.0.0/16 appears to be all Chinese IPs, and skipping any political debate, China has an *extremely* serious spam problem that they need to deal with -- so I wouldn't personally have a problem blocking the whole 211.158.0.0/16 range (unless you normally receive a large volume of E-mail from China).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
