how can i block an entire continent?
Results 1 to 7 of 7

Thread: how can i block an entire continent?

  1. #1
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,786

    how can i block an entire continent?

    up until a couple of week ago, smtp/pop3 was fine. then the mis director decided we needed norton av for smtp gateways. I could not get both smtp authentication and av gateway to work at the same time so we brought in a consultant last wed.

    The consultant says it can't be done, that as long as we use smtp w/norton we can't authenticate. the smtp sever needs to 'not authenticate all requests from the av server. It looks like we might get exchange, but it will take some time, 2 weeks to a month for the powers that be to decide.

    Today i notice that someone in thiland has hi-jacked my server to relay spam, creating a log file 24 meg over normal. were talking serious spam.

    I can't deal with this. I hate fu##en spam.

    the corp says we must have av gateway and relay is essential for the work that they do.

    the way i see it my only alternative is to filter out entire ip ranges. We have no dealins with S E asia so maybe blocking the whole lot and other misc spamhauses ain't a bad idea.

    In ISA i can filter deny smtp to a range of ip addresses, but i don't quite understand it

    the rage they ask for is:

    subnet: xxx.xxx.xxx.xxx

    mask: xxx.xxx.xxx.xxx

    now given the block the spammer owns 202.198.0.1 - 202.198.255.255 how is this info calculated.

    i tried to enter, under 'block this computer', 202.198.0.0 hoping to include everything included in 202.198, but that didn't work.

    anybody have any idea?

    ps if any one knows what the ip range is for s.e. asia that would be appreciated. not that all spam comes from their but much of it does.
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

  2. #2
    Senior Member
    Join Date
    Aug 2001
    Posts
    410
    Now, i have never worked with that software. But if it works anything like the IRC bans. I have done it with romania. Banned *.ro and 195.*

    That is probably not what you are looking for, but it is the closest i have ever done to banning a whole country/continent.
    savIRC :: The Multi-Platform IRC Client v. 1.8 [Released 9.04.02]

  3. #3
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,786
    thats what i was trying to do with 202.198.0.0 where zeros include all numbers. the format dosn't allow wild cards and zero to seem to mean all. :-(
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

  4. #4
    Senior Member Ouroboros's Avatar
    Join Date
    Nov 2001
    Location
    Superior, WI USA
    Posts
    628
    http://www.hildrum.com/IPAddress.htm

    that's a bit of info about IP Addresses work...

    as far a blocking any particular set...you'd have to determine the ISP's set, then whittle it down from there...not easy.

    Ouroboros
    "entia non sunt multiplicanda praeter necessitatem"

    "entities should not be multiplied beyond necessity."

    -Occam's Razor


  5. #5
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,786
    i guess it would be easier to have the router drop all packets from asia-pac (202.0.0.0 - 203.255.255.255)
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

  6. #6
    Fastest Thing Alive s0nIc's Avatar
    Join Date
    Sep 2001
    Location
    Sydney
    Posts
    1,584
    hmm if you can get yourself a good ol trusty packet annalyzer.. u can filter out 202.198 and block it..

  7. #7
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,786
    i configured my router's outside interface to deny all traffic from those ip ranges. screw'em the only things i ever get from asia.pac are break-in attemps and spam.
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •