RE: IP range filter

Thanks Dan,

I have been actually been looking at creating my own PHP/MySQL based black list.

I want to be able to easily add spammers to a db which I can add things like examples of spam and a note as to why I blocked them. Later on I would not remember why I blocked them. I can also add a domain option to filter by domain.

I am hosting third party mail with I can't filter at all (poor souls). I need to be able to apply the blacklist to only select domains.

Thanks,

Dan

-----Original Message-----
From: DC [mailto:dan.newsletter@xxxxxxxxxxx]
Sent: Friday, June 27, 2003 11:36 AM
To: post_office@xxxxxxxxxxxxxxx
Subject: Re: IP range filter

Here's message with a link to a list of IPs from the venerable John Sievert that you can put in your IP Block field. (NOT SMTP filter, see below for where to put this list of IPs).

-------------------------------------
Right now, I publish a list of deniable ip addresses at
http://www.customer1st.com/AntiSpam. This is a list we have compiled of
spammers from our logs. You just copy this and paste it into the box in the
blocking page. Use at your own risk.

J
------------------
I put these on our server and it blocks about 100 messages a day.

To clarify John's message:

The IP list is NOT intended to go into a SMTP filter. The IP list is
intended to go into the:

System Config > Set Mail Blocking Options > Block Incoming Mail as Indicated
Below > Block from these IP Addresses

field.

This is a more extreme case of spam stopping where you can't even
forward the message to be examined; the message is simply refused based on
IP address! use caution.

As far as grep in SMTP filters goes, please join the chorus of voices asking tenon for some kind of documentation for it. There are some simple things you can do with the grep functionality, but I've come to realize that the regexp implementation is a mix of wildcards and rexexp - or it might be entirely wildcards!

For IP range wildcards use:

>

This tells the BlackHole filter to exclude messages that come from the 24.45.0.0 block which is our cablemodem.

This filter has been working for a few days, you might want to put your IP ranges like that.

Also, you'll see in John Sievert's IP blocking list IPs like 61.43.0.0 which tells the IP block to block a block of IPs.

Cheers,
dan

On 6/27/03 11:59 AM, "Dan Tappin" <dan.tappin@xxxxxxxxxxxxxxx> wrote:

> Tenon support is telling me that you can't specify an IP range in the SMTP
> filter elements.
>
> For example:
>
> 211.32.0.0-211.39.255.255
>
> Would a grep filter look like this: (I really need to buy a grep book!)
>
> 211.[32-39].*.*
>
> or simply:
>
> 211.[32-39].*
>
> I am really tired of getting spammed from these subnets and I am getting to
> the point where I am blacklisting entire parts of the world just to avoid it.
>
> Thanks,
>
> Dan
>

Related: :Green iMac:image%204.jpg:00145EA4:21CDF513:00000000:00000000