Spam Filter ISP Forums : Format of the IP blacklist https://www.logsat.com/spamfilter/forums/ Wed, 17 Jun 2026 21:41:57 +0000 Mon, 28 Feb 2005 16:32:29 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=5074 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[Format of the IP blacklist : Cire,First of all, it really depends...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5328&title=format-of-the-ip-blacklist#5328 Author: Desperado
Subject: 5074
Posted: 28 February 2005 at 4:32pm

Cire,

First of all, it really depends on what OS you are using for DNS BUT ...

The first thing you will want to do is create a "Delegation" to the DNS Server that will be hosting the DNSBL zones.   So, in my setup, the dnsbl is hosted on "resolver.mags.net" and mags.net is hosted on several dns servers but the Primary DNS is on "ns1.mags.net".   In the "mags.net" zone file on that server I have:

;  Delegated sub-zone:  dnsbl.mags.net.
;
dnsbl    NS    resolver.mags.net.
;  End delegation

On the server "resolver.mags.net, I have a Forward zone file "dnsbl.mags.net"

If I want to block 100.50.25.10 I have an entry in the zone file of:
10.25.50.100    A    127.0.0.2

If I want to block 100.50.25.0/24 I have:
*.25.50.100    A    127.0.0.2

Does this help?

Regards,
Dan S.


Edited by Desperado]]> Mon, 28 Feb 2005 16:32:29 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5328&title=format-of-the-ip-blacklist#5328 <![CDATA[Format of the IP blacklist : Dan, How did you implement your...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5322&title=format-of-the-ip-blacklist#5322 Author: Cire
Subject: 5074
Posted: 28 February 2005 at 9:12am

Dan,

How did you implement your own dnsbl?

Thanx - Cire

]]> Mon, 28 Feb 2005 09:12:55 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5322&title=format-of-the-ip-blacklist#5322 <![CDATA[Format of the IP blacklist : For what it is worth, my vote...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5319&title=format-of-the-ip-blacklist#5319 Author: Desperado
Subject: 5074
Posted: 28 February 2005 at 12:58am

For what it is worth, my vote is to run your own dnsbl list as we do. That gives you the ability to block what and only what you want to block.

Dan S.

]]> Mon, 28 Feb 2005 00:58:54 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5319&title=format-of-the-ip-blacklist#5319 <![CDATA[Format of the IP blacklist : There are problems with any one...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5318&title=format-of-the-ip-blacklist#5318 Author: pcmatt
Subject: 5074
Posted: 27 February 2005 at 11:34pm

There are problems with any one method of blocking or whitelisting, that's why SpamFilter gives us the variety of blocking and whitelisting capabilities.

The answer to how do you block 218.237.0.0/24 is that you list 254 IP's.  Rarely a necessity.  It's more likely that you would want to block 218.237.0.0 and whitelist 218.237.0.* which the program handles just fine as is.

So, my vote is that it's useful to be able to block using two wildcards. 

My vote is to leave it as is having a global available for the last two bytes until SpamFilter can calculate the IP's in memory and we can list subnets in simpliest format using IP/Mask in the blocklist like 82.154.0.0/15  for the range 82.155.0.0 - 82.155.127.255

]]> Sun, 27 Feb 2005 23:34:49 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5318&title=format-of-the-ip-blacklist#5318 <![CDATA[Format of the IP blacklist : You are right, that would be a...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5306&title=format-of-the-ip-blacklist#5306 Author: LogSat
Subject: 5074
Posted: 25 February 2005 at 3:35pm

You are right, that would be a problem, as the whole 218.237.xx.xx network would be blocked by entering 218.237.0.0.

We won't be able to change this behavior as doing so would "break" allthe IP lists being used by users. An option may be to just limit thewildcard to a class C pool of addresses, thus considering only the lastzero as a wildcard.

We'll be thinking this over and maybe run a poll for our users to see what the preference would be.
]]> Fri, 25 Feb 2005 15:35:03 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5306&title=format-of-the-ip-blacklist#5306 <![CDATA[Format of the IP blacklist : So, just to make sure I understand...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5296&title=format-of-the-ip-blacklist#5296 Author: Cire
Subject: 5074
Posted: 25 February 2005 at 9:33am

So, just to make sure I understand this completely. A 0 is a wildcard? So, 218.237.0.0 means to block 218.237.0.0/16, correct? This method seems to me to have some problems. What if you wanted to block was 218.237.0.0/24?

Thanx - Cire

]]> Fri, 25 Feb 2005 09:33:07 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5296&title=format-of-the-ip-blacklist#5296 <![CDATA[Format of the IP blacklist : Cire, Ranges cannot be entered...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5294&title=format-of-the-ip-blacklist#5294 Author: LogSat
Subject: 5074
Posted: 24 February 2005 at 6:20pm

Cire,

Ranges cannot be entered as the blacklist are expecting strings andstring wildcards. In your example you will need to enter 3 entries:

218.237.0.0
218.238.0.0
218.239.0.0

to block all 3 subnets.
]]> Thu, 24 Feb 2005 18:20:08 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5294&title=format-of-the-ip-blacklist#5294 <![CDATA[Format of the IP blacklist : Is it possible to enter IP ranges...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5293&title=format-of-the-ip-blacklist#5293 Author: Cire
Subject: 5074
Posted: 24 February 2005 at 4:34pm

 

Is it possible to enter IP ranges in the IP blacklist? For example, if I want to block 218.237.0.0-218.239.255.255 how would it be entered?

Thanx - Cire

]]> Thu, 24 Feb 2005 16:34:54 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5074&PID=5293&title=format-of-the-ip-blacklist#5293