On Sep 28, 2015, at 1:34 PM, Axb <axb.li...@gmail.com> wrote: > you may need to start looking at a local RBL and start blocking IP ranges > > been blocking snowshoe from Baraka Streaming Technologies Inc 38.113.188.0/22 > since 2014-06-18 - no complaints - ymmv
Will look into it, but that doesn't really address my questions. It would take care of this batch of snowshoe but I'm thinking more generally. Would a "forged" rule be worthwhile, or not recommended for some reason? (If low-scoring.) And why is HTML_FONT_LOW_CONTRAST just a placeholder when network tests are enabled? > whois is your friend... Not sure how whois would have helped me here... the SOA for this IP range is amanah.com, but that doesn't really tell me much. Thanks. -- Amir