[NTLUG:Discuss] Trying to block all China/Korea IPs in greylisting

[Stuart Johnston]

Are you trying to completely block all mail coming from certain
countries or only selectively greylist them?


. Daniel wrote:
> I have the list from the following URL:
> 
> http://www.okean.com/sinokorea.txt
> 
> I can parse just the first field easily enough with:
> 
> cat sinokorea.txt | awk '{ print $1 }'
> 
> The greylist (relaydelay in this case) wants to see block ranges as 
> incomplete octets if that makes sense.  For example, if I wanted to block 
> 218.232.x.x, I would simply add a block to "218.232"  It is my 
> understanding that it would take 218.232.0.0 literally and would only block 
> that IP address (yes, I know it's not valid).
> 
> I have tried adding " | sed /.0.0.0// " to the previous command line but I 
> do not get the results I seek... it doesn't make sense.  I'm guessing that 
> expressions in sed for matching have some special meaning when a "." 
> character is used.
> 
> And perhaps I am barking up the wrong tree entirely, but my end purpose is 
> to make entries in my relaydelay blacklist table to block out all of china, 
> korea and ultimately any country outside of the US that I care to.  (The 
> business I work for has no business need to receive email from outside of 
> the state, let alone outside of the country... so it's presumed to be spam 
> when it originates from outside of the USA.)
> 
> Anyone know any special magic incantations to achieve this end?  I had 
> heard someone mention spamassassin rules that would elevate risk by country 
> of origin, but I cannot find anything on the net to document this yet...
> 
> _________________________________________________________________
> 「メッセ meets お仕事」スタート！メッセンジャーページもリニューアルしまし
> た。 http://messenger.live.jp/oshigoto/index.htm 
> 
> 
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss