Group, Michael Wise (on the sonicwall list at yahoogroups.com) pointed out that this will block out Japan, New Zealand, Australia, and other countries not notorious for spam. He then sent me a detailed and verified list of spam sources - by ip range. I have implemented it. He said he will put it on his website soon.
FYI - If you are considering this, go on over to the yahoo groups and check out this thread. DL Meade, CNE, MCP Network Administrator Frankfurt-Short-Bruza www.fsb-ae.com <http://www.fsb-ae.com> -----Original Message----- From: Meade, Devin [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 23, 2002 11:32 AM To: '[EMAIL PROTECTED]' Subject: RE: [SonicWALL]- Blocking certain SMTP servers That was it! Devin L. Meade, CNE, MCP Network Administrator Frankfurt-Short-Bruza www.fsb-ae.com <http://www.fsb-ae.com> -----Original Message----- From: Andrew Kaplan [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 23, 2002 10:38 AM To: [EMAIL PROTECTED] Subject: RE: [SonicWALL]- Blocking certain SMTP servers http://cgi.apnic.net/apnic-bin/ipv4-by-country.pl?country=cn Andrew P. Kaplan Network Administrator CyberShore, Inc. http://www.cshore.com "The world isn't fair, Calvin.' 'I know, but why isn't it ever unfair in my favor?" Calvin > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > Behalf Of Meade, Devin > Sent: Thursday, May 23, 2002 11:12 AM > To: '[EMAIL PROTECTED]' > Subject: [SonicWALL]- Blocking certain SMTP servers > > > Group, > > We have been getting spammed every 3-5 mins for about a week with > email. It > seems to be a dictionary attack using all known first names paired with > @<ourdomain>. My guess is they are attempting to acquire valid email > address by collecting the bounces and comparing what they sent - if no > bounce, then it is a valid address. > > Okay, so I don't want email from them, I look at the inet headers and find > it seems to be from the asia-pacifc netblock (big yawn). On our SW Pro, I > blocked SMTP from 210.0.0.0 thru 211.255.255.255 to our email > gateway on our > DMZ. This works like a champ. > > Is this the correct range, or can I expand if further? I > remember a post a > few months back can't find. > > Thanks, > > DL Meade, CNE, MCP > Network Administrator > Frankfurt-Short-Bruza > www.fsb-ae.com <http://www.fsb-ae.com> > > --- > [This E-mail scanned for viruses by Declude/F-Prot AV] > > ================================================================== > ================================= > To unsubscribe, send email to [EMAIL PROTECTED] In the body of > the email put the following: unsubscribe sonicwall your_name > The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.362 / Virus Database: 199 - Release Date: 5/7/02 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.362 / Virus Database: 199 - Release Date: 5/7/02 --- [This E-mail scanned for viruses by Declude/F-Prot AV] ============================================================================ ======================= To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ --- [This E-mail scanned for viruses by Declude/F-Prot AV] ============================================================================ ======================= To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ --- [This E-mail scanned for viruses by Declude/F-Prot AV] =================================================================================================== To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/
