http://cgi.apnic.net/apnic-bin/ipv4-by-country.pl?country=cn
Andrew P. Kaplan Network Administrator CyberShore, Inc. http://www.cshore.com "The world isn't fair, Calvin.' 'I know, but why isn't it ever unfair in my favor?" Calvin > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > Behalf Of Meade, Devin > Sent: Thursday, May 23, 2002 11:12 AM > To: '[EMAIL PROTECTED]' > Subject: [SonicWALL]- Blocking certain SMTP servers > > > Group, > > We have been getting spammed every 3-5 mins for about a week with > email. It > seems to be a dictionary attack using all known first names paired with > @<ourdomain>. My guess is they are attempting to acquire valid email > address by collecting the bounces and comparing what they sent - if no > bounce, then it is a valid address. > > Okay, so I don't want email from them, I look at the inet headers and find > it seems to be from the asia-pacifc netblock (big yawn). On our SW Pro, I > blocked SMTP from 210.0.0.0 thru 211.255.255.255 to our email > gateway on our > DMZ. This works like a champ. > > Is this the correct range, or can I expand if further? I > remember a post a > few months back can't find. > > Thanks, > > DL Meade, CNE, MCP > Network Administrator > Frankfurt-Short-Bruza > www.fsb-ae.com <http://www.fsb-ae.com> > > --- > [This E-mail scanned for viruses by Declude/F-Prot AV] > > ================================================================== > ================================= > To unsubscribe, send email to [EMAIL PROTECTED] In the body of > the email put the following: unsubscribe sonicwall your_name > The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.362 / Virus Database: 199 - Release Date: 5/7/02 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.362 / Virus Database: 199 - Release Date: 5/7/02 --- [This E-mail scanned for viruses by Declude/F-Prot AV] =================================================================================================== To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/
