One spammer is persistently slipping through...

[Michele Neylon :: Blacknight Solutions]

If you can access your MTA you could drop the network there.

Mr Michele Neylon
Blacknight Internet Solutions Ltd
http://www.blacknight.ie/
Tel. +353 59 9137101

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Remco Barendse
Sent: 26 April 2004 12:02
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: [MAILSCANNER] One spammer is persistently slipping through...

Thanks for the tip!

Unfortunately this is not really an option for me, my ISP has batched SMTP
running for the domain and rejecting it through a firewall rule will only
cause the mail to get queued in bstmp.

Maybe I can add it to my spam blacklist rule set, not sure of the correct
format though. All examples seem to simply short the ip of the last
digits, can I specify a /20 too?

Thanks again!
Remco


On Mon, 26 Apr 2004, Raymond Dijkxhoorn wrote:

> Hi!
>
> > Weird, I use every blocklist that comes with MailScanner, it wasn't
picked
> > up by any of them.
>
> Its for sure listed in the spamhaus DB.
>
> > Nullrouting sounds cool :)
> >
> > How can I nullroute a complete ip range?
>
> You can do that on different places... on your edge router, assuming its a
> cisco:
>
> ip route 66.249.96.0 255.255.240.0 null0
>
> Or simply in iptables something like:
>
> -A ETH0-INPUT -s 66.249.96.0/20 -p tcp -i eth0 --dport 25 -j REJECT
>
> Like that.
>
> A nullroute on the network edge is most of the time easiest ...
>
> Bye,
> Raymond.
>
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> For further info about MailScanner, please see the Most Asked
> Questions at    http://www.mailscanner.biz/maq/     and the archives
> at    http://www.jiscmail.ac.uk/lists/mailscanner.html
>

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
For further info about MailScanner, please see the Most Asked
Questions at    http://www.mailscanner.biz/maq/     and the archives
at    http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
For further info about MailScanner, please see the Most Asked
Questions at    http://www.mailscanner.biz/maq/     and the archives
at    http://www.jiscmail.ac.uk/lists/mailscanner.html