[NTLUG:Discuss] Trying to block all China/Korea IPs in greylisting

[. Daniel]

I have the list from the following URL:

http://www.okean.com/sinokorea.txt

I can parse just the first field easily enough with:

cat sinokorea.txt | awk '{ print $1 }'

The greylist (relaydelay in this case) wants to see block ranges as 
incomplete octets if that makes sense.  For example, if I wanted to block 
218.232.x.x, I would simply add a block to "218.232"  It is my 
understanding that it would take 218.232.0.0 literally and would only block 
that IP address (yes, I know it's not valid).

I have tried adding " | sed /.0.0.0// " to the previous command line but I 
do not get the results I seek... it doesn't make sense.  I'm guessing that 
expressions in sed for matching have some special meaning when a "." 
character is used.

And perhaps I am barking up the wrong tree entirely, but my end purpose is 
to make entries in my relaydelay blacklist table to block out all of china, 
korea and ultimately any country outside of the US that I care to.  (The 
business I work for has no business need to receive email from outside of 
the state, let alone outside of the country... so it's presumed to be spam 
when it originates from outside of the USA.)

Anyone know any special magic incantations to achieve this end?  I had 
heard someone mention spamassassin rules that would elevate risk by country 
of origin, but I cannot find anything on the net to document this yet...

_________________________________________________________________
「メッセ meets お仕事」スタート！メッセンジャーページもリニューアルしまし
た。 http://messenger.live.jp/oshigoto/index.htm