On Mon, Dec 12, 2005 at 01:16:07AM +0100, Frank Ellermann wrote
If you know exactly what you're doing: It would be strange if you
send mails (incl. potentially abusive mail or abuse reports) to "them"
while blocking their abuse reports or their replies to your reports.
This is specifically for places I don't have contacts in. If I do, I
whitelist them.
If you don't block mail to postmaster@ / abuse@ that point is
probably moot.
I should've been more precise; that's just my waltdnes userid. The
postmaster, abuse, and domain admin are not filtered at all, although
I'm very tempted with the domain admin address. Problem is, that's
also my communications channel with my registrar, so I wouldn't want to
do anything there. Well, maybe somebody HELO'ing as waltdnes.org.
Another issue with blocking countries by IP is of course the quality
of the used list. For some IP ranges it is difficult to get this
right. 217.0.0.0/8 is one case where you might be in for surprises.
I remember the fun and games once it became obvious to the 419
shysters that Nigeria was being blocked to Hell and back. They'd
register a /24 in the UK or elsewhere. And they burned through a bunch
of satellite service CIDRss. I reported several to the maintainer. The
weird part was that despite going to all that trouble to hide in another
country's address space, thay'd actually put "NG" in the country field
of their allocation.
--
Walter Dnes <waltdnes(_at_)waltdnes(_dot_)org> In linux /sbin/init is Job #1
My musings on technology and security at http://tech_sec.blog.ca
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg