Because all amazon spam seems to originate from within that block. The decision to block larger blocks than /24 is based on:
- faster and more efficient to block at the firewall level - /24 block are just not enough these days - better than doing cpu intensive content filtering - covers all spam, no matter what they try - punishes spam-friendly networks (and countries) - less inbound mail to scan - some legitimate mail will be rejected, which we can white-list if/when someone actually complains On Fri, 12 May 2023 14:49:36 +0000 Alexander Huynh via mailop <[email protected]> wrote: > I’m curious as to the decision to block the /11, versus blocking the spamming > domain. > > May I ask what was the reasoning? > > One thing I could think of is: blocking the subnet can be done at a lower > level of the tech stack (e.g. iptables/BPF), and thus would consume less CPU. > > Thanks, > -- > Alex > _______________________________________________ > mailop mailing list > [email protected] > https://list.mailop.org/listinfo/mailop _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
