See http://www.okean.com/asianspamblocks.html <http://www.okean.com/asianspamblocks.html> - This works.
DL Meade, CNE, MCP Network Administrator Frankfurt-Short-Bruza www.fsb-ae.com <http://www.fsb-ae.com> -----Original Message----- From: Meade, Devin [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 23, 2002 12:22 PM To: '[EMAIL PROTECTED]' Subject: RE: [SonicWALL]- Blocking certain SMTP servers Group, Michael Wise (on the sonicwall list at yahoogroups.com) pointed out that this will block out Japan, New Zealand, Australia, and other countries not notorious for spam. He then sent me a detailed and verified list of spam sources - by ip range. I have implemented it. He said he will put it on his website soon. FYI - If you are considering this, go on over to the yahoo groups and check out this thread. DL Meade, CNE, MCP Network Administrator Frankfurt-Short-Bruza www.fsb-ae.com <http://www.fsb-ae.com> -----Original Message----- From: Meade, Devin [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 23, 2002 11:32 AM To: '[EMAIL PROTECTED]' Subject: RE: [SonicWALL]- Blocking certain SMTP servers That was it! Devin L. Meade, CNE, MCP Network Administrator Frankfurt-Short-Bruza www.fsb-ae.com <http://www.fsb-ae.com> -----Original Message----- From: Andrew Kaplan [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 23, 2002 10:38 AM To: [EMAIL PROTECTED] Subject: RE: [SonicWALL]- Blocking certain SMTP servers http://cgi.apnic.net/apnic-bin/ipv4-by-country.pl?country=cn Andrew P. Kaplan Network Administrator CyberShore, Inc. http://www.cshore.com "The world isn't fair, Calvin.' 'I know, but why isn't it ever unfair in my favor?" Calvin > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > Behalf Of Meade, Devin > Sent: Thursday, May 23, 2002 11:12 AM > To: '[EMAIL PROTECTED]' > Subject: [SonicWALL]- Blocking certain SMTP servers > > > Group, > > We have been getting spammed every 3-5 mins for about a week with > email. It > seems to be a dictionary attack using all known first names paired with > @<ourdomain>. My guess is they are attempting to acquire valid email > address by collecting the bounces and comparing what they sent - if no > bounce, then it is a valid address. > > Okay, so I don't want email from them, I look at the inet headers and find > it seems to be from the asia-pacifc netblock (big yawn). On our SW Pro, I > blocked SMTP from 210.0.0.0 thru 211.255.255.255 to our email > gateway on our > DMZ. This works like a champ. > > Is this the correct range, or can I expand if further? I > remember a post a > few months back can't find. > > Thanks, > > DL Meade, CNE, MCP > Network Administrator > Frankfurt-Short-Bruza > www.fsb-ae.com <http://www.fsb-ae.com> > > --- > [This E-mail scanned for viruses by Declude/F-Prot AV] > > ================================================================== > ================================= > To unsubscribe, send email to [EMAIL PROTECTED] In the body of > the email put the following: unsubscribe sonicwall your_name > The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.362 / Virus Database: 199 - Release Date: 5/7/02 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.362 / Virus Database: 199 - Release Date: 5/7/02 --- [This E-mail scanned for viruses by Declude/F-Prot AV] ============================================================================ ======================= To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ --- [This E-mail scanned for viruses by Declude/F-Prot AV] ============================================================================ ======================= To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ --- [This E-mail scanned for viruses by Declude/F-Prot AV] ============================================================================ ======================= To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ --- [This E-mail scanned for viruses by Declude/F-Prot AV] =================================================================================================== To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/
