<div dir="ltr">The only time I had to start going through and listing IP blocks to be, erm, blocked, was before I was using RBLs. Do you have those configured? If so, are they configured on the MTA's config? If not, put them there. That cut down on so much crap when I started doing that years ago.<br>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Mar 6, 2014 at 12:56 PM, Steve Campbell <span dir="ltr"><<a href="mailto:campbell@cnpapers.com" target="_blank">campbell@cnpapers.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Way too many to even try looking up. Look at the headers of the email,<br>
and find a site that lists the IP block for that IP. You sometimes can<br>
just do a "whois" and get this information.<br>
<br>
China is another one that seems to be attempting the hacks as well.<br>
<span class="HOEnZb"><font color="#888888"><br>
steve<br>
</font></span><div class="HOEnZb"><div class="h5">On 3/6/2014 12:11 PM, Philip Parsons wrote:<br>
> Can you supply the IP lists that you have had success with ?<br>
><br>
> -----Original Message-----<br>
> From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a>] On Behalf Of Steve Campbell<br>
> Sent: March-06-14 8:17 AM<br>
> To: MailScanner discussion<br>
> Subject: Re: Is anyone else getting hammered by Russian spam<br>
><br>
> Russian Federation, Ukraine, Taiwan. I put these IP blocks in my<br>
> firewall since I see them trying to hack email passwords as well, along<br>
> with user accounts on my other servers.<br>
><br>
> steve<br>
> On 3/6/2014 10:56 AM, Philip Parsons wrote:<br>
>> Any pointers of a rule that can block it ? It is all just Russian words.<br>
>><br>
>> Thank you<br>
>> P Parsons<br>
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
</div></div></blockquote></div><br></div>