According to Michael A. Terrell :
"DoN. Nichols" wrote:
[ ... ]
I also see a lot of repeated delivery attempts even though each
is rejected. Here are the ones with 40 or over refused attempts (this
week) before I blocked them totally by re-routing the IPs to 127.0.0.1.
================================================== ====================
40 pool-70-104-151-168.lsanca.fios.verizon.net
40 static-71-127-51-195.washdc.east.verizon.net
40 stsou2-wifinat.cust.termsnet.cz
41 89.123.33.250
41 c-71-198-191-149.hsd1.ca.comcast.net
42 68-186-243-229.dhcp.oxfr.ma.charter.com
48 sivka.carrier.kiev.ua
58 fmmailgate04.web.de
60 mx.alita.ru
64 mail.futures.ru
70 203.81.19.122
105 122.129.243.47
114 mail2.doubs.fr
================================================== ====================
As you can see -- there are quite a few in the US, even given
that all of the raw IPs are from outside the US (Korea in at least one
case, and China in another among the largest numbers.)
When I notice enough repeats of a given source scrolling up my
console window, I add it to the block list -- and depending on where it
is from -- I may expand that to as many IPs as I can.
How about importing all the addresses into a databse to sort them for
you?
I had a shell script adding them automatically -- but it
mis-read some of the maillog file and started blocking some things which
I wanted to receive.
And things really get nasty in some parts of Europe (manged by
RIPE) where one or two Class-C subnets (256 IPs) will be one country,
and then totally different countries (similarly small blocks) on either
side -- except that I want to block country 'A', and to allow countries
'B' and 'C'.
And importing them from the whois servers is a good way to get
your access to said serves blocked. Most have nasty wording concerning
downloading of the full contents -- or any kind of automated lookup.
And sometimes jwhois guesses wrong about where to ask about a
given IP, and the return information is rather misleading. :-)
Enjoy,
DoN.
--
Email: | Voice (all times): (703) 938-4564
(too) near Washington D.C. |
http://www.d-and-d.com/dnichols/DoN.html
--- Black Holes are where God is dividing by zero ---