Is anyone else getting hammered by Russian spam
Terry Hulen Jr
terry.hulen at gmail.com
Thu Mar 6 18:29:56 GMT 2014
The only time I had to start going through and listing IP blocks to be,
erm, blocked, was before I was using RBLs. Do you have those configured?
If so, are they configured on the MTA's config? If not, put them there.
That cut down on so much crap when I started doing that years ago.
On Thu, Mar 6, 2014 at 12:56 PM, Steve Campbell <campbell at cnpapers.com>wrote:
> Way too many to even try looking up. Look at the headers of the email,
> and find a site that lists the IP block for that IP. You sometimes can
> just do a "whois" and get this information.
> China is another one that seems to be attempting the hacks as well.
> On 3/6/2014 12:11 PM, Philip Parsons wrote:
> > Can you supply the IP lists that you have had success with ?
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info [mailto:
> mailscanner-bounces at lists.mailscanner.info] On Behalf Of Steve Campbell
> > Sent: March-06-14 8:17 AM
> > To: MailScanner discussion
> > Subject: Re: Is anyone else getting hammered by Russian spam
> > Russian Federation, Ukraine, Taiwan. I put these IP blocks in my
> > firewall since I see them trying to hack email passwords as well, along
> > with user accounts on my other servers.
> > steve
> > On 3/6/2014 10:56 AM, Philip Parsons wrote:
> >> Any pointers of a rule that can block it ? It is all just Russian words.
> >> Thank you
> >> P Parsons
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> Before posting, read http://wiki.mailscanner.info/posting
> Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the MailScanner