Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Blacklisted IP Addresses
  FAQ FAQ  Forum Search   Register Register  Login Login

Blacklisted IP Addresses

 Post Reply Post Reply
Author
Dave View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Dave Quote  Post ReplyReply Direct Link To This Post Topic: Blacklisted IP Addresses
    Posted: 08 June 2005 at 9:31pm

I may not be understanding this, but I understand that I can block a full C Class of IP addresses by using a "0" as a wildcard at the end(e.g. 200.30.54.0). Is there a way to block a larger block of IP addresses?

An example is I want to block all of Latin America (200.0.0.0 - 200.255.255.255) but I don't want to have to type every C class in my blacklist. I also have already used the country blacklist to block "Mexico", but the spam keeps flowing and the filter doesn't decipher that it's from Mexico and quarantine it. I'm wondering if the wildcard of 200.0.0.0 would work. But at the same time, sometimes I only want to block a group of 4096 hosts, etc.

Any help would be appreciated,

-Dave

Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 09 June 2005 at 11:51am

Dave,

Your question has been discussed before but the short answer is NO.  The problem is that a zero is valid in the second and third octet of an IP address so that 66.66.0.0  will block addresses from 66.66.0.0.to 66.66.0.255.

Regards,



Edited by Desperado
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Back to Top
Dave View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Dave Quote  Post ReplyReply Direct Link To This Post Posted: 09 June 2005 at 5:14pm

Hey Dan,

Thanks for the info. Thats what I was afraid of. Better get busy. Perhaps Logsat can add this to the "wish list" This feature is standard in most enterprise email server software, so I would think that the range could be supported here as well.

Thanks again,

-Dave

 

Back to Top
jacksun View Drop Down
Newbie
Newbie


Joined: 24 February 2005
Status: Offline
Points: 31
Post Options Post Options   Thanks (0) Thanks(0)   Quote jacksun Quote  Post ReplyReply Direct Link To This Post Posted: 12 June 2005 at 2:14pm
What about the ability to block a class of addresses using CIDR. Just put in 200.0.0.0/8 which would block the 200.X.X.X class A address block?
 
One could then become much more granular with this such as using  /27 or /31 etc etc?
 
Wayne
Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 12 June 2005 at 2:18pm

CIDR's has been discussed in the forum before and I do not believe it is in the cards for the near future.

Regards,

The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4065
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 12 June 2005 at 2:51pm
Due to the way SpamFilter performs checks against blacklisted IPs, CIDRs are not available, and probably will not in the future. For speed all blacklisted IP tests are performed with string matches. As some of these lists can be several MB in size, performance is of outmost importance. Implementing CIDRs in addition to the current string searches will cause too much performance loss, thus for now it is not available.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.063 seconds.