[spf-discuss] late comment on spammer DNSes and garbage registrars

I have complained to registrars that seem otherwise valid but which
sell domains to the same spammers day after day. In almost all cases,
they don't care and don't do anything to get rid of their criminal
clients.

In particular, by now any spammer should know to get their domains
from one of a handful of Chinese registrars - you can tell them in
advance that you'll use the domain for crimes and they'll sell you
the domain anyway. If you look up the domain and it is registered
to a CN (or even HK) registrar, then consider it junk.

I'm going to refer the "Chinese problem" to my senator - the US should
go on record with China that their Internet Crime Orgy must end.
With 70,000+ internet censors, they can peel off 700 of them to combat
internet crime - except the network operators are in many cases
colluding with the spammers, no doubt for a "cut".

I wrote a Milter to combat spam by inspecting the addresses of what it
advertises, which was unstable in situ. So I rewrote the filter to use with
procmail, and what I do is find any reference to a website within the body

of the mail, and if that site lives in a prohibited address space, Ireject the

mail.

The list of "prohibited networks" is a "to-do" list of who to chase down to
make them stop HOSTING SPAMMERS. Currently the spammers have found
TURKEY and after sending numerous complaints to istanbultelecom and
ttnet.tr, I've given up on them and consider their address space toxic.
Various domestic places host serial SPAMMERS and should be sued: see
some of the domestics in the list below.

We'd like the world to adopt the "pugnacious ISP" view that spam is not to
be tolerated - and we need to show abusers why: control your network or
it and everything on it will be ignored.

Here is our draconian hit list (for a server not expecting a lot of overseas
traffic.) We don't need ANYTHING from mainland China, for example.

/* table deciding what networks may advertise websites : must be sortedascending */

C srtab[] = {
    { 0x3A000000, 0x3BFFFFFF, 0x01FFFFFF } /* FAIL 58, 59 */
   ,{ 0x3C000000, 0x3DFFFFFF, 0x01FFFFFF } /* FAIL 60, 61 */
   ,{ 0x3E000000, 0x3EFFFFFF, 0x00FFFFFF } /* FAIL 62 */

,{ 0x3FD8D400, 0x3FD8D7FF, 0x000003FF } /* FAIL 63.216.212.0/22Innova */,{ 0x3FFB3A00, 0x3FFB3BFF, 0x000001FF } /* FAIL 63.251.58.0/23MarketTools in SF */,{ 0x40254000, 0x40257FFF, 0x00003FFF } /* FAIL 64.37.64.0/18Cybercon */,{ 0x40BB6000, 0x40BB7FFF, 0x00001FFF } /* FAIL 64.187.96.0/19AccelerateBiz, FtL FL */,{ 0x414B8000, 0x414BFFFF, 0x00003FFF } /* FAIL 65.75.128.0/18Softwareworks */,{ 0x42628000, 0x4262FFFF, 0x00007FFF } /* FAIL 66.98.128.0/17ThePlanet */,{ 0x4298A000, 0x4298BFFF, 0x00001FFF } /* FAIL 66.152.160.0/19MULTACOM */,{ 0x42A5E000, 0x42A5FFFF, 0x00001FFF } /* FAIL 66.165.224.0/19Cybercon */

   ,{ 0x430F0000, 0x430FFFFF, 0x0000FFFF } /* FAIL 67.15.0.0/16 */

,{ 0x43CD6B58, 0x43CD6B5F, 0x00000007 } /* FAIL 67.205.107.88/29Darrin Wohl @ Groupe iWeb */,{ 0x482C4000, 0x482C4FFF, 0x00000FFF } /* FAIL 72.44.64.0/20MULTACOM */,{ 0x4A7CC000, 0x4A7CDFFF, 0x00001FFF } /* FAIL 74.124.192.0/19corporate colo, LA CA */,{ 0x4CBF4000, 0x4CBF7FFF, 0x00003FFF } /* FAIL 76.191.64.0/18VanOppen on Sentris */

   ,{ 0x4EA60000, 0x4EA6FFFF, 0x0000FFFF } /* FAIL 78.166/8 turktelecom */

,{ 0x4F87A000, 0x4F87BFFF, 0x00001FFF } /* FAIL 79.135.160.0/19sistemnet (TR) */

   ,{ 0x50000000, 0x57FFFFFF, 0x07FFFFFF } /* FAIL 80-87 */
   ,{ 0x58000000, 0x59FFFFFF, 0x01FFFFFF } /* FAIL 88-89 */
   ,{ 0x5A000000, 0x5BFFFFFF, 0x01FFFFFF } /* FAIL 90-91 */
   ,{ 0x72000000, 0x73FFFFFF, 0x01FFFFFF } /* FAIL 114-115 */
   ,{ 0x74000000, 0x75FFFFFF, 0x01FFFFFF } /* FAIL 116-117 */
   ,{ 0x76000000, 0x77FFFFFF, 0x01FFFFFF } /* FAIL 118-119 */
   ,{ 0x78000000, 0x7BFFFFFF, 0x03FFFFFF } /* FAIL 120-123 */
   ,{ 0x7C000000, 0x7DFFFFFF, 0x01FFFFFF } /* FAIL 124-125 */
   ,{ 0x93000000, 0x93FFFFFF, 0x00FFFFFF } /* FAIL 147 */
   /*,{ 0x97000000, 0x97FFFFFF, 0x00FFFFFF }   /* FAIL 151 */
   ,{ 0xBD000000, 0xBDFFFFFF, 0x00FFFFFF } /* FAIL 189 */
   ,{ 0xBE000000, 0xBFFFFFFF, 0x01FFFFFF } /* FAIL 190-191 */
   ,{ 0xC1000000, 0xC1FFFFFF, 0x00FFFFFF } /* FAIL 193 */
   ,{ 0xC8000000, 0xC9FFFFFF, 0x01FFFFFF } /* FAIL 200-201 */

,{ 0xCBCAEC00, 0xCBCAEFFF, 0x000003FF } /* FAIL 203.202.236.0/22MIZUNET(_at_)SG */,{ 0xCDF22000, 0xCDF22FFF, 0x00000FFF } /* FAIL 205.242.32.0/20INTERMIND @ LV.NV.US */,{ 0xCE377000, 0xCE377FFF, 0x00000FFF } /* FAIL 206.55.112.0/20 GSIin KC,MO */,{ 0xCEBF8140, 0xCEBF817F, 0x0000003F } /* FAIL 206.191.129.64/26Boca networks (US:FL) */,{ 0xD0291860, 0xD029186F, 0x0000000F } /* FAIL 208.43.24.96/28Client Intellect at SOFTLAYER */,{ 0xD046A800, 0xD046AFFF, 0x000007FF } /* FAIL 208.70.168.0/21:fail all of COOPLABS in San Jose *//*,{ 0xD046A9A0, 0xD046A9BF, 0x0000001F } /* FAIL208.70.169.160/27 DRL group hosted by Cooplabs *//*,{ 0xD046AE00, 0xD046AEFF, 0x000000FF } /* FAIL 208.70.174.0/24Transverse Technology hosted by Cooplabs */,{ 0xD0489800, 0xD0489BFF, 0x000003FF } /* FAIL 208.72.152.0/22Razor hosts spamserver Darrin Wohl */,{ 0xD1DC0000, 0xD1DCFFFF, 0x0000FFFF } /* FAIL 209.220.0.0/16 stopsALL of XO *//* ,{ 0xD1DCD86E, 0xD1DCD86E, 0x00000000 } /* FAIL 209.220.216.110asshole that XO will not stop */,{ 0xD1DAE000, 0xD1DAFFFF, 0x00001FFF } /* FAIL 209.250.224.0/19RackVibe */

   ,{ 0xD20E4000, 0xD20E7FFF, 0x00003FFF } /* FAIL 210.14.64.0/14 china */
   ,{ 0xD20E8000, 0xD20EFFFF, 0x00007FFF } /* FAIL 210.14.128.0/13 china */
   ,{ 0xD3000000, 0xD3FFFFFF, 0x00FFFFFF } /* FAIL 211 */
   ,{ 0xD4486700, 0xD44867FF, 0x000000FF } /* FAIL 212.72.103 (SI) */

,{ 0xD49C0000, 0xD49CFFFF, 0x000000FF } /* FAIL 212.156.0.0/16turktelecom */

   /*,{ 0xD5000000, 0xD5FFFFFF, 0x00FFFFFF }   /* FAIL 213 */
   ,{ 0xD5E9ED00, 0xD5E9EDFF, 0x000000FF } /* FAIL 213.235.239.0/24 (AT) */
   ,{ 0xD6000000, 0xD7FFFFFF, 0x01FFFFFF } /* FAIL 214-215 */

,{ 0xD80F9F20, 0xD80F9F3F, 0x0000001F } /* FAIL 216.15.159.32/27 =DRL under CYBERCON */,{ 0xD875D0E0, 0xD875D0FF, 0x0000003F } /* FAIL 216.117.208.224/27server universe in delray bch FL */

   ,{ 0xD9000000, 0xD9FFFFFF, 0x00FFFFFF } /* FAIL 217 */
   ,{ 0xDA000000, 0xDBFFFFFF, 0x01FFFFFF } /* FAIL 218-219 */
   ,{ 0xDC000000, 0xDFFFFFFF, 0x03FFFFFF } /* FAIL 220-223 */
   };
#define srcount (sizeof(srtab)/sizeof(C))



-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/735/=now
RSS Feed: https://www.listbox.com/member/archive/rss/735/
Powered by Listbox: http://www.listbox.com