Re: Blocking mail "from me to me" (was: Country IP block list)

2009-08-24 Thread LuKreme
On 24-Aug-2009, at 08:28, Daniel L'Hommedieu wrote: The one bit of spam I'd like to stop, and I seem to remember seeing talk of it at some point (but I've been unable to find it again) is the spam appears to be "from me to me." That is, the spammers who use my email address as the from addr

Re: Blocking mail "from me to me" (was: Country IP block list)

2009-08-24 Thread Martijn de Munnik
> Most of this spam is also blocked using spamhaus. Also you could add SPF > to your own domain so no other servers could send mail using your > domain. > http://www.openspf.org/Introduction Off course your server should check the SPF records for incoming mail.

Re: Blocking mail "from me to me" (was: Country IP block list)

2009-08-24 Thread Martijn de Munnik
On Mon, 2009-08-24 at 10:28 -0400, Daniel L'Hommedieu wrote: > On Aug 24, 2009, at 10:10, Mikael Bak wrote: > > Daniel L'Hommedieu wrote: > >> > >> The spam I see pretty much all originates in China & Brazil, with > >> some > >> originating in Korea & US. It also pretty much all originates on >

Blocking mail "from me to me" (was: Country IP block list)

2009-08-24 Thread Daniel L'Hommedieu
On Aug 24, 2009, at 10:10, Mikael Bak wrote: Daniel L'Hommedieu wrote: The spam I see pretty much all originates in China & Brazil, with some originating in Korea & US. It also pretty much all originates on dynamic IP addresses, so if there's a way to block email from dynamic address ranges

Re: Country IP block list

2009-08-24 Thread Mikael Bak
Daniel L'Hommedieu wrote: > > The spam I see pretty much all originates in China & Brazil, with some > originating in Korea & US. It also pretty much all originates on > dynamic IP addresses, so if there's a way to block email from dynamic > address ranges, I would very much be interested in that

Re: Country IP block list

2009-08-24 Thread Daniel L'Hommedieu
On Aug 23, 2009, at 22:26, Olivier Nicole wrote: Hi, Could someone provide links to sites where IP addresses are grouped by coun= try? ASNs would work too but would prefer IP lists that I could put in a f= ile that my postfix mail gateway could read. Obvious countries like China = and B

Re: Country IP block list

2009-08-23 Thread Olivier Nicole
Hi, > Could someone provide links to sites where IP addresses are grouped by coun= > try? ASNs would work too but would prefer IP lists that I could put in a f= > ile that my postfix mail gateway could read. Obvious countries like China = > and Brazil I would like to block wholesale. As mention

Re: Country IP block list

2009-08-23 Thread lst_hoe02
Zitat von Daniel L'Hommedieu : On Aug 23, 2009, at 8:08, Byung-Hee HWANG wrote: At Sat, 22 Aug 2009 08:56:28 -0700, Security Admin (NetSec) wrote: [1 ] Could someone provide links to sites where IP addresses are grouped by country? ASNs would work too but would prefer IP lists that I co

Re: Country IP block list

2009-08-23 Thread J.D. Bronson
We use pf and tables here to block as well. I have huge CIDR blocks as we don't communicate directly with anyone outside the USA either. Spam has fallen seriously. The only ones we typically see now are the residential IP blocks from Verizon or RoadRunner.. -- J.D. Bronson

Re: Country IP block list

2009-08-23 Thread Daniel L'Hommedieu
On Aug 23, 2009, at 8:08, Byung-Hee HWANG wrote: At Sat, 22 Aug 2009 08:56:28 -0700, Security Admin (NetSec) wrote: [1 ] Could someone provide links to sites where IP addresses are grouped by country? ASNs would work too but would prefer IP lists that I could put in a file that my postfix

Re: Country IP block list

2009-08-23 Thread mouss
Benny Pedersen a écrit : > On Sun 23 Aug 2009 04:41:02 PM CEST, Justin Piszcz wrote > >> What I have found most useful is: geoip-policyd > > reminds me of maRBL > >> It uses geoip as well but as a small policy server framework, you can >> do whatever you want to do depending on where an IP origi

Re: Country IP block list

2009-08-23 Thread Benny Pedersen
On Sun 23 Aug 2009 04:41:02 PM CEST, Justin Piszcz wrote What I have found most useful is: geoip-policyd reminds me of maRBL It uses geoip as well but as a small policy server framework, you can do whatever you want to do depending on where an IP originates from (re: GeoIP). Come from c

Re: Country IP block list

2009-08-23 Thread Justin Piszcz
On Sun, 23 Aug 2009, postfix@cmulcahy.com wrote: Ralf Hildebrandt wrote: * Security Admin (NetSec) : Could someone provide links to sites where IP addresses are grouped by country? I use (the free) geoip database for that. This script has proven useful for me... http://www.cyberciti

Re: Country IP block list

2009-08-23 Thread postfix . org
Ralf Hildebrandt wrote: * Security Admin (NetSec) : Could someone provide links to sites where IP addresses are grouped by country? I use (the free) geoip database for that. This script has proven useful for me... http://www.cyberciti.biz/faq/block-entier-country-using-iptables/ (Y

Re: Country IP block list

2009-08-23 Thread Byung-Hee HWANG
At Sat, 22 Aug 2009 08:56:28 -0700, Security Admin (NetSec) wrote: > > [1 ] > Could someone provide links to sites where IP addresses are grouped by > country? ASNs would work too but would prefer IP lists that I could put in a > file that my postfix mail gateway could read. Obvious countries

Re: Country IP block list

2009-08-23 Thread Ralf Hildebrandt
* Security Admin (NetSec) : > Could someone provide links to sites where IP addresses are grouped by > country? I use (the free) geoip database for that. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburg

Re: Country IP block list

2009-08-22 Thread Mikael Bak
Security Admin (NetSec) wrote: > Could someone provide links to sites where IP addresses are grouped by > country? ASNs would work too but would prefer IP lists that I could put > in a file that my postfix mail gateway could read. Obvious countries > like China and Brazil I would like to block wh

Re: Country IP block list

2009-08-22 Thread ghe
On Aug 22, 2009, at 10:31 AM, Roderick A. Anderson wrote: Thanks. I would (coming in late to this thread) be interested. GOTO http://www.slsware.com/asia-blk.html And thanks for 'encouraging' me to tidy things up a bit :-) -- Glenn English g...@slsware.com

Re: Country IP block list

2009-08-22 Thread Roderick A. Anderson
ghe wrote: On Aug 22, 2009, at 9:56 AM, Security Admin (NetSec) wrote: Could someone provide links to sites where IP addresses are grouped by country? ASNs would work too but would prefer IP lists that I could put in a file that my postfix mail gateway could read. Obvious countries like Ch

Re: Country IP block list

2009-08-22 Thread Daniel V. Reinhardt
From: Security Admin (NetSec) To: "postfix-users@postfix.org" Sent: Saturday, August 22, 2009 3:56:28 PM Subject: Country IP block list Could someone provide links to sites where IP addresses are grouped by country? ASNs would work too

Re: Country IP block list

2009-08-22 Thread ghe
On Aug 22, 2009, at 9:56 AM, Security Admin (NetSec) wrote: Could someone provide links to sites where IP addresses are grouped by country? ASNs would work too but would prefer IP lists that I could put in a file that my postfix mail gateway could read. Obvious countries like China and B

Re: Country IP block list

2009-08-22 Thread J.D. Bronson
How about this site for a start: http://www.okean.com/antispam/sinokorea.html -- J.D. Bronson

Re: Country IP block list

2009-08-22 Thread Bill Landry
Security Admin (NetSec) wrote: > Could someone provide links to sites where IP addresses are grouped by > country? ASNs would work too but would prefer IP lists that I could put > in a file that my postfix mail gateway could read. Obvious countries > like China and Brazil I would like to block wh

Country IP block list

2009-08-22 Thread Security Admin (NetSec)
Could someone provide links to sites where IP addresses are grouped by country? ASNs would work too but would prefer IP lists that I could put in a file that my postfix mail gateway could read. Obvious countries like China and Brazil I would like to block wholesale. Thanks in advance!