[Declude.JunkMail] blocking IP range
I remember someone on this list said that if I wanted to add a weight to a series of IP addresses in the same range I could do it this way: 1. In my global.cfg add an external test pointing to a file, adding some weight to it 2. In that file, have a list of IP addresses for example: IPFILE.TXT 65.205.249.112 65.205.249.111 Is that it? Don't I need to use some type of HEADERS CONTAINS - like this? HEADERSCONTAINS65.205.249.112 or REMOTEIPIS 65.205.249.112 Last question: I was also told that I could do IP ranges like this: 65.205.249.0/24 - and this would cover all possible permutations of 65.204.249.??? Am I getting this right? Thanks. --- [This E-mail was scanned for viruses.] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] blocking IP range
global.cfg: MAILFROM-IP-BLACKLIST ipfile D:\imail\declude\FPFilters\MailFrom-IP.txt x 150 0 Mailfrom-ip.txt: 199.232.98.0/24 199.232.98.0/24 insiderbizclub.com added 05-26-06 199.237.50.179 199.237.50.179 greatlaurel.net added 04-16-05 Either and IP address or a IP and CIDR. anything after the IP or IP/CIDR is a comment. 65.205.249.0/24 would cover 65.205.249.0 to 65.205.249.255 (DNSStuff.com has a tool to calculate these) - Original Message - From: Kevin Rogers [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, January 05, 2006 8:42 AM Subject: [Declude.JunkMail] blocking IP range I remember someone on this list said that if I wanted to add a weight to a series of IP addresses in the same range I could do it this way: 1. In my global.cfg add an external test pointing to a file, adding some weight to it 2. In that file, have a list of IP addresses for example: IPFILE.TXT 65.205.249.112 65.205.249.111 Is that it? Don't I need to use some type of HEADERS CONTAINS - like this? HEADERSCONTAINS65.205.249.112 or REMOTEIPIS 65.205.249.112 Last question: I was also told that I could do IP ranges like this: 65.205.249.0/24 - and this would cover all possible permutations of 65.204.249.??? Am I getting this right? Thanks. --- [This E-mail was scanned for viruses.] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] blocking IP range
I believe ipfile is specifically used to block single IPs and blocks of IPs. The file it relates to should have a list of single IPs or IP/CIDR. After the IP, the remainder of the line is only used for comments. Otherwise you can also have a test (just as you state you've already got) in which you would use qualifiers such as header contains, body contains, helo is. etc., the string, and a weight to assign to that test if failed. Check the docs for all the variations. This is mainly used for key words, or a string of characters and an IP address is nothing more than a string of characters. HTH.. ~Joe - Original Message - From: Kevin Rogers [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, January 05, 2006 8:42 AM Subject: [Declude.JunkMail] blocking IP range I remember someone on this list said that if I wanted to add a weight to a series of IP addresses in the same range I could do it this way: 1. In my global.cfg add an external test pointing to a file, adding some weight to it 2. In that file, have a list of IP addresses for example: IPFILE.TXT 65.205.249.112 65.205.249.111 Is that it? Don't I need to use some type of HEADERS CONTAINS - like this? HEADERSCONTAINS65.205.249.112 or REMOTEIPIS 65.205.249.112 Last question: I was also told that I could do IP ranges like this: 65.205.249.0/24 - and this would cover all possible permutations of 65.204.249.??? Am I getting this right? Thanks. --- [This E-mail was scanned for viruses.] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses at HNB.com] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Blocking IP Range
I want to block a range of IP addresses 157.237.137.0 to 157.237.152.255 in my IP Kill file. Can I do this with a single line entry? My best guess is three entries. 157.237.137.0/21 IP Range Killed 157.237.144.0/21 IP Range Killed 157.237.152.0/24 IP Range Killed Kevin M. Donovan, MCSE Network Support Specialist IntelliWare Systems, Inc. Phone (817) 277-0800 x228 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Blocking IP Range
I want to block a range of IP addresses 157.237.137.0 to 157.237.152.255 in my IP Kill file. Can I do this with a single line entry? My best guess is three entries. 157.237.137.0/21 IP Range Killed 157.237.144.0/21 IP Range Killed 157.237.152.0/24 IP Range Killed How are you getting such a range of IPs? Such an 'odd' range of IPs isn't going to be easy to block exactly. To do it exactly, you would need to start with 157.237.137.0/24 (any lower numbers for the CIDR range will cause 157.237.136.* IPs to get caught). You may want to check out the CIDR tool at http://www.DNSstuff.com to get a better idea (although it won't let you enter the whole IP range and give you a list of the CIDR ranges to block). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
