[PLUG] Spammers and ip blocks

[Glenn Kelley <glenn@typo3usa.com>]

Recently we did a test recently and redirected the smtp traffic from  
entire subnets (will list below) and sure enough our users reported so  
much less spam...

We scrubbed the test box and sure enough all but 3 emails were spam.

This is after roughly a week of testing and over 25K worth of messages  
(interns now hate reading mail...)

Using a simple pfsense system we blocked setup the following alias and  
then migrated the ips to redirect to a different system...

figured i would post here if it helps you...

<address>66.0.0.0/8 66.0.0.0/8 78.0.0.0/8 79.0.0.0/8 80.0.0.0/8  
81.0.0.0/8 82.0.0.0/8 83.0.0.0/8 84.0.0.0/8 85.0.0.0/8 86.0.0.0/8  
87.0.0.0/8 88.0.0.0/8 89.0.0.0/8 90.0.0.0/8 91.0.0.0/8 92.0.0.0/8  
93.0.0.0/8 94.0.0.0/8 95.0.0.0/8 116.0.0.0/8 121.0.0.0/8 122.0.0.0/8  
123.0.0.0/8 124.0.0.0/8 125.0.0.0/8 194.0.0.0/8 195.0.0.0/8  
200.0.0.0/8 201.0.0.0/8 202.0.0.0/8 203.0.0.0/8 210.0.0.0/8  
190.0.0.0/8</address>
			<descr>SMTP Block Known Spam Networks</descr>
			<type>network</type>
			<detail>smtp block spam Canada||smtp block Spam Canada||smtp block  
Spam Amsterdam||smtp block Spam Amsterdam||smtp block Spam Amsterdam|| 
smtp block Spam Amsterdam||smtp block Spam Amsterdam||smtp block Spam  
Amsterdam||smtp block Spam Amsterdam||smtp block Spam Amsterdam||smtp  
block Spam Amsterdam||smtp block Spam Amsterdam||smtp block Spam  
Amsterdam||smtp block Spam Amsterdam||smtp block Spam Amsterdam||smtp  
block Spam Amsterdam||smtp block Spam Amsterdam||smtp block Spam  
Amsterdam||smtp block Spam Amsterdam||smtp block Spam Amsterdam||smtp  
block Spam Asia||smtp block Spam Amsterdam||smtp block Spam Amsterdam|| 
smtp block Spam Amsterdam||smtp block Spam Amsterdam||smtp block Spam  
Amsterdam||smtp block Spam Amsterdam||smtp block Spam Amsterdam||smtp  
block Spam Mexico||smtp block Spam Mexico||smtp block Spam Mexico|| 
smtp block Spam Mexico||smtp block Spam Mexico||smtp block Spam Mexico||
\



Glenn
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug