Re: doamin disabeling
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
z.varady@chello.hu wrote:
> I have a debian firewall.
Me too, And, I am a user of hinet as well.
As far as I know, there are many spammer are using hinet's ip address
sending spam out, but not included the hinet's mail server.
> Can i disable somehow the *.hinet.net domain in the iptables chain?
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 168.95.0.0 - 168.95.255.255
netname: Hinet
I don't think that will be a good idea, to block 168.95.0.0/255.255.0.0,
I belive hinet has more IP range than that and are still growing, you
will never block them all.
> I could disable the ip adress of the hinet server but there are many.
> They always sending spam to our mail server.
A better way to block spam from hinet is only block dail-up and adsl's
ip address of hinet, these IPs are all has same reverse domain:
.HINET-IP.hinet.net
But I don't know how to use iptables to do this, I use postfix to
reject mail from hinet's dail-up/adsl IPs.
This is my setting in postfix for your reference:
/\.HINET-IP\.hinet/ 550 Reject from Hinet IP, please use your ISP's SMTP
- -Andrew
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFDBZywnQYz4bYlCYURAlOoAJ9Xie4V6iQOBg1quAvlcchTZk8RngCfUSgh
LgOX7ZYvVbp81jDPJ32Zqkw=
=xvGx
-----END PGP SIGNATURE-----
Reply to: