Topic: How to block Chinese & Korean subnets

[ryan]

How can I block ALL subnets from these countries?  China and Korea don't care about spam and are doing nothing to stop it.  How do I use /etc/hosts or smtpd_check_rules in SME 5.1.2 to block subnets?  Any help would be appreciated.

In the past week I have been hit with A LOT of Spam from these subnets.  I am currently filtering with SBL, SpamCop, ORDB, and Oriusoft...but these are not stopping this spam.  

Anyone please help!

Thanks,

ryan

[ryan]

I think I got it figured out.

I added china.blacklist.us to my RBL lookups...SPAM from China is so bad, may companies are blocking all email from China.  Hopefully I won't have a mass of SPAM to deal with tomorrow morning.

ryan

[Renan Nepomuceno]

Ryan,

      ryan how did you configure your sme server to use the rbl site. Right now I am trying to figure it out but no luck on my side, by the way I am using SME 5.5 with e-smith-mailfront-1.0.0.rbl by Charlie Bradly.
   
   Hope you can help,

thanks,
  renan

[Charlie Brady]

Renan Nepomuceno wrote:

>       ryan how did you configure your sme server to use the
> rbl site. Right now I am trying to figure it out but no luck
> on my side, by the way I am using SME 5.5 with
> e-smith-mailfront-1.0.0.rbl by Charlie Bradly.

I replied to your email, but it bounced.

You need to have ucspi-tcp installed. I guess you don't, and you used --nodeps to install my e-smith-mailfront, which would otherwise have demanded it.

Charlie

[ryan]

Renan,

I am using RBL checking on SME 5.1.2, but I was able to do it on my test 5.6 box.  After installing Charlie Brady's e-smith-mailfront rpm, edit /var/service/smtpdfront-qmail/rblsmtpd.conf   (for 5.6)

Lookup on line how to edit rblsmtpd and you should be able to filter against any rbl sites you choose.  

I did not have to deal with 'ucspi-tcp', but my test box is 5.6, not 5.5.  

This box is not in use, but it passes the rbl blocking email tests from ordb and sbl spamhaus.

Once Mitel figures out PPTP and IPSEC masq and in/out traffic, I will upgrade to 5.6.  Hopefully soon!!!!  I want to upgrade!!!!

good luck

ryan

[Renan Nepomuceno]

Charlie,

      Charlie what version of ucspi-tcp should I installed because right now I have ucspi-tcp-0.88-03.i386.rpm installed with update3 installed. When I check the rblsmtpd with the command of more /var/log/smtpfront-qmail/current |grep rblsmtpd
it did'nt block any spam and still I receive many spam mail when I check the logs of the smtpfront-qmail/current. It is mainly coming from tiawanese sites and the receipts are users of yahoo.com and yahoo.tw.
     
Thanks,
  renan