Did anyone check which dnsbls block them all?
fwiw, if you want to roll your own, up-to-date lists, to drop into nftables, etc
a quick peek here:
https://docs.cloud.google.com/appengine/docs/standard/outbound-ip-addresses
points at
IPRANGE_URLS = {
"goog": "https://www.gstatic.com/ipranges/goog.json";,
"cloud": "https://www.gstatic.com/ipranges/cloud.json";,
}
this, e.g.,
curl -4 -sSL https://www.gstatic.com/ipranges/cloud.json | jq -r
'(.prefixes[].ipv4Prefix // empty), (.prefixes[].ipv6Prefix // empty)'
should pull a workable list.
i get annoying large amounts of spam/probes from those blocks.
but, over 6 months, pfx logs tells me ~ 100K blocked smtp attempts, ~ 700 valid
delivered emails. none delivered were unwanted, afaict. postscreen + spamhaus
+ clamav, plus occassional header milter blocks, doing their job.
the hosts received from for a given domain are dynamic -- vary across CIDRs for
any given sender.
just can't block it all ... yet.
suricata listening at nftables does a great job of dealing with other
ports/services noise.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
