<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Thanks!</FONT></DIV><FONT face=Arial size=2>
<DIV><BR>Rob....</DIV>
<DIV> </DIV>
<DIV><BR></FONT> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=mandrews@FD9NS01.OKLADOT.STATE.OK.US
href="mailto:mandrews@FD9NS01.OKLADOT.STATE.OK.US">Mike Andrews</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=MAILSCANNER@JISCMAIL.AC.UK
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Thursday, June 17, 2004 12:08
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: Probably a stupid
question.....</DIV>
<DIV><BR></DIV><BR><FONT face=sans-serif size=2>Best place probably is in your
MTA. </FONT><BR><BR><FONT face=sans-serif size=2>If you're using sendmail,
it's easy: edit your /etc/mail/access file to add a line like this:
</FONT><BR><BR><FONT face=sans-serif
size=2>IPaddress-or-left-substring-of-IPaddress<tab>REJECT</FONT>
<BR><FONT face=sans-serif size=2>or, if you want to get more fancy,
</FONT><BR><FONT face=sans-serif
size=2>IPaddress-or-left-substring-of-IPaddress<tab>ERROR:.5.7.1:"500
Send mail to <address> if you think your mail was rejected in
error."</FONT> <BR><BR><FONT face=sans-serif size=2>(You'll want to be root,
or to be in a group that has write access to the files involved. If you're
</FONT><BR><FONT face=sans-serif size=2> using the "send mail to" form,
you'll have to whitelist <address> in your access file.)</FONT>
<BR><BR><FONT face=sans-serif size=2>Examples: if you want to reject mail from
everyone in 38.0.0.0/8</FONT> <BR><BR><FONT face=sans-serif size=2>38
REJECT</FONT> <BR><BR><FONT face=sans-serif size=2>
everyone in 211.20/16:</FONT> <BR><FONT face=sans-serif
size=2>211.20 REJECT</FONT> <BR><BR><FONT
face=sans-serif size=2> everyone in
123.45.6/24:</FONT> <BR><FONT face=sans-serif size=2>123.45.6
REJECT</FONT> <BR><BR><FONT face=sans-serif size=2>
the single IP address 78.99.123.4</FONT> <BR><FONT
face=sans-serif size=2>78.90.123.4 REJECT</FONT>
<BR><BR><FONT face=sans-serif size=2> a single
domain-based address:</FONT> <BR><FONT face=sans-serif
size=2>mailer.spam-source.com REJECT</FONT>
<BR><BR><FONT face=sans-serif size=2> all the
machines in spam-source.com</FONT> <BR><FONT face=sans-serif
size=2>spam-source.com REJECT</FONT> <BR><BR><FONT
face=sans-serif size=2> all the machines in the
".biz" domain</FONT> <BR><FONT face=sans-serif size=2>biz
REJECT</FONT> <BR><BR><FONT face=sans-serif size=2>Sendmail doesn't
match regular expressions (REs), or provide a way to block</FONT> <BR><FONT
face=sans-serif size=2>based on netblocks other than on octet boundaries (/8,
16, /24, and /32) and </FONT><BR><FONT face=sans-serif size=2>dot-delimited
pieces of a Fully-Qualified Domain Name. Other MTAs may permit
</FONT><BR><FONT face=sans-serif size=2>a little more granularity, or match
REs, and so on. </FONT><BR><BR><FONT face=sans-serif size=2>Once you've saved
the access file, then you do `makemap hash access<access' </FONT><BR><FONT
face=sans-serif size=2>from the /etc/mail directory. The changes take effect
immediately. </FONT><BR><BR><FONT face=sans-serif size=2>Other MTAs, other
methods. </FONT><BR><BR><FONT face=sans-serif size=2>You can do it in
MailScanner, too, but it's really an MTA function. </FONT><BR><BR><FONT
face=sans-serif size=2>Mike Andrews<BR>Information Security<BR>Technical
Services Division<BR>Oklahoma Dept. of Transportation
<BR>mandrews@odot.org</FONT> <BR><BR><BR>
<TABLE width="100%">
<TBODY>
<TR vAlign=top>
<TD width="40%"><FONT face=sans-serif size=1><B>Rob
<rob@THEHOSTMASTERS.COM></B> </FONT><BR><FONT face=sans-serif
size=1>Sent by: MailScanner mailing list
<MAILSCANNER@JISCMAIL.AC.UK></FONT>
<P><FONT face=sans-serif size=1>06/17/2004 10:42 AM</FONT>
<TABLE border=1>
<TBODY>
<TR vAlign=top>
<TD bgColor=white>
<DIV align=center><FONT face=sans-serif size=1>Please respond
to<BR>MailScanner mailing list
<MAILSCANNER@JISCMAIL.AC.UK></FONT></DIV></TR></TBODY></TABLE><BR></P>
<TD width="59%">
<TABLE width="100%">
<TBODY>
<TR>
<TD>
<DIV align=right><FONT face=sans-serif size=1>To</FONT></DIV>
<TD vAlign=top><FONT face=sans-serif
size=1>MAILSCANNER@JISCMAIL.AC.UK</FONT>
<TR>
<TD>
<DIV align=right><FONT face=sans-serif size=1>cc</FONT></DIV>
<TD vAlign=top>
<TR>
<TD>
<DIV align=right><FONT face=sans-serif size=1>Subject</FONT></DIV>
<TD vAlign=top><FONT face=sans-serif size=1>Probably a stupid
question.....</FONT></TR></TBODY></TABLE><BR>
<TABLE>
<TBODY>
<TR vAlign=top>
<TD>
<TD></TR></TBODY></TABLE><BR></TR></TBODY></TABLE><BR><BR><BR><FONT face=Arial
size=2>I have been using Mailscanner for a couple years now, and it works
great! Hats off to all coders involved.</FONT> <BR><FONT size=3> </FONT>
<BR><FONT face=Arial size=2>I install it get a few rulesets from a couple
websites and all works great!</FONT> <BR><FONT size=3> </FONT> <BR><FONT
face=Arial size=2>But now for the stupid question...</FONT> <BR><FONT
size=3> </FONT> <BR><FONT face=Arial size=2>I want to be able to simply
block all email coming from one email address or an IP or a block of
IPs.</FONT> <BR><FONT size=3> </FONT> <BR><FONT face=Arial size=2>Where
would I add this? In the whitelist file? </FONT><BR><FONT size=3> </FONT>
<BR><FONT face=Arial size=2>Not to sure...</FONT> <BR><FONT
size=3> </FONT> <BR><FONT face=Arial size=2>Any help
appreciated...</FONT> <BR><FONT size=3> </FONT> <BR><FONT face=Arial
size=2>:)</FONT> <BR><FONT size=3> </FONT> <BR><FONT face=Arial
size=2><BR>Rob....</FONT> <BR><FONT face=Arial size=2> </FONT> <BR><FONT
size=3><BR></FONT><BR><FONT size=3>-------------------------- MailScanner list
----------------------<BR>To leave, send leave mailscanner to </FONT><A
href="mailto:jiscmail@jiscmail.ac.uk"><FONT color=blue
size=3><U>jiscmail@jiscmail.ac.uk</U></FONT></A><FONT size=3><BR>Before
posting, please see the Most Asked Questions at</FONT><FONT color=blue
size=3><U><BR></U></FONT><A href="http://www.mailscanner.biz/maq/"><FONT
color=blue size=3><U>http://www.mailscanner.biz/maq/</U></FONT></A><FONT
size=3> and the archives at</FONT><FONT color=blue size=3><U><BR></U></FONT><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html"><FONT color=blue
size=3><U>http://www.jiscmail.ac.uk/lists/mailscanner.html</U></FONT></A>
<BR>-------------------------- MailScanner list ----------------------<BR>To
leave, send leave mailscanner to <A
href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A> and
the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE></BODY></HTML>
-------------------------- MailScanner list ----------------------<br>
To leave, send leave mailscanner to <a href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</a><br>
Before posting, please see the Most Asked Questions at<br>
<a href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</a> and the archives at<br>
<a href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</a><br>