Re: [Asrg] Re: Country numbers

["Walter Dnes" <waltdnes at waltdnes.org>]

On Mon, Dec 12, 2005 at 01:16:07AM +0100, Frank Ellermann wrote

> If you know exactly what you're doing:  It would be strange if you
> send mails (incl. potentially abusive mail or abuse reports) to "them"
> while blocking their abuse reports or their replies to your reports.

  This is specifically for places I don't have contacts in.  If I do, I
whitelist them.

> If you don't block mail to postmaster@ / abuse@ that point is
> probably moot.

  I should've been more precise; that's just my waltdnes userid.  The
postmaster, abuse, and domain admin are not filtered at all, although
I'm very tempted with the domain admin address.  Problem is, that's
also my communications channel with my registrar, so I wouldn't want to
do anything there.  Well, maybe somebody HELO'ing as waltdnes.org.

> Another issue with blocking countries by IP is of course the quality
> of the used list.  For some IP ranges it is difficult to get this
> right.  217.0.0.0/8 is one case where you might be in for surprises.

  I remember the fun and games once it became obvious to the 419
shysters that Nigeria was being blocked to Hell and back.  They'd
register a /24 in the UK or elsewhere.  And they burned through a bunch
of satellite service CIDRss.  I reported several to the maintainer.  The
weird part was that despite going to all that trouble to hide in another
country's address space, thay'd actually put "NG" in the country field
of their allocation.

-- 
Walter Dnes <waltdnes at waltdnes.org> In linux /sbin/init is Job #1
My musings on technology and security at http://tech_sec.blog.ca

_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg