Japanese spam...

[mikea]

On Tue, Oct 17, 2006 at 06:42:46PM -0700, Dan Hollis wrote:
> On Tue, 17 Oct 2006, mikea wrote:
> > On Wed, Oct 18, 2006 at 12:44:01AM +0000, ajos1 at onion.demon.co.uk wrote:
> >> Last week or 2... I have 50 to 100 messages per day with ".jp" on the end... all out of the blue... is it just me?  or has everyone been getting extra spam from ".jp" ?
> >>> From -  akiramenai_2006 at ocn.ne.jp
> >> Subj -  =?iso-2022-jp?b?gyrcn...
> > Since I put all .jp netblocks in the blacklist[1], we don't have any
> > problems with spam from .jp. But I see an _awful_ lot of attempts from
> > those netblocks.
> > [1]  We're state government, we have no business connections with .jp,
> >     and have *never* received valid E-mail from anyone in .jp.
> 
> Easier to just block iso-2022-jp (and euc-kr, big5, etc). That will block 
> japanese spams no matter what IP they come from.

If I block them at the connection level (blackmilter in my case), I 
don't have to wait until I see the language encoding stuff. But YMMV.

-- 
Mike Andrews, W5EGO
mikea at mikea.ath.cx
Tired old sysadmin