On Thursday 30 October 2003 10:24 am, Ralph Slooten wrote:

>
> Does anyone know where I can find such information, to ease my troubles?
> ;-) I need to find out the full ip-ranges of certain ISP's.

You can get ranges from whois if you really want them.  However, you appear to 
have the opportunity to do the new a valuable service.  If you set up your 
machine to honeypot and tarpit the spammers attempting to use your mail 
server, you can infuriate them much more than by simply banning the IP range.  
There is info available on the net to allow you to do that.  Short story, you 
set your machine up so that it doesn't relay deny attempts for relays but 
simply bitbuckets the message.  The spammer, thinking that the relay is 
working starts a spam run and wastes valuable time sending messages that end 
up in /dev/null.  

With the tarpit, you rig your mail server to accept the connection attempt but 
then receive the traffic e  v   e   r     s  o    s    l   o   w   l   y, 
which wastes the spammers time and keep his connections from being used to 
actually send spam.  By the time they figure it out, they have missed the 
opportunity to send tons of spam that otherwise would have gone out.

If you want to find out more, let me know and I can send you some links to 
point you in that direction.  If you simply want to get lists of ISP ranges, 
or even entire country ranges known to be friendly to spam,   you can go to 
http://www.blackholes.us/  for a lot of ranges to block.  Specific spammer 
ranges are available from http://www.spamhaus.org/rokso/index.lasso and 
http://www.spamhaus.org/index.lasso, although you can also configure Postfix 
to use the RBL's directly to block these ranges which saves you time from 
having to transcribe the list.  You can also go here to get a full list of 
DNSBL's.  http://www.declude.com/junkmail/support/ip4r.htm

-- 
Bryan Phinney
Software Test Engineer


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to