SMTP Attacks

[Rick Stevens]

On Tue, 2006-10-24 at 14:01 -0400, Jeff Kinz wrote:
> On Tue, Oct 24, 2006 at 10:43:37AM -0700, Rick Stevens wrote:
> > I'm rather hesitant to post it publicly.  I can only say that these
> > are the networks I've had the most trouble with and the ones that have
> > ignored my requests to block such behavior.  I'm NOT condemning everyone
> > on these networks, but there seems to be a lot of *ssholes on them.
> > 
> > Ah, hell, I'll throw caution to the winds.  Here's the iptables rules
> > I've developed:
> > 
> > # Block traffic from known spam sources...
> > -A INPUT -s 201.42/15 -p tcp -j DROP
> 
> And in other news, Rick Stevens has been named as an additional
> defendant in I360 Insight's lawsuit against The Spamhaus Project....
> 
> :-)

Har!

Nah, I don't publicly blacklist them...I just don't let them into our
network...and there are a few specific holes in that list for legitimate
servers that I know about.

Spamhaus, however, are Nazis and should be sued.

> > -A INPUT -s 200.176.112/21 -p tcp -j DROP
> > -A INPUT -s 202.158.29.0/255.255.255.0 -p tcp -j DROP
> > -A INPUT -s 203.228.187.0/255.255.255.0 -p tcp -j DROP
> > -A INPUT -s 209.223.0.0/255.255.0.0 -p tcp -j DROP
> > -A INPUT -s 218.0.0.0/255.0.0.0 -p tcp -j DROP
> > -A INPUT -s 219.251.88.0/255.255.252.0 -p tcp -j DROP
> 
> 
----------------------------------------------------------------------
- Rick Stevens, Senior Systems Engineer     rstevens at vitalstream.com -
- VitalStream, Inc.                       http://www.vitalstream.com -
-                                                                    -
-               500: Internal Fortune Cookie Error                   -
----------------------------------------------------------------------