[Karl Schmidt said:]
> above example I have neglected doing any subnet larger than /24 or smaller
> than /29, because if it is smaller than 29 it probably is better just to
> list all the IPs, and it is not often necessary to anything larger than /24.
Unless you have a well defined list of recipients who would not ever receive
any "legitimate" mail from Asia and other places where much of the spam is
relayed through. If you have the flexibility, you can cut out a huge
percentage by going right down to /8 on some subnets, and large chunks of
others with /16.
eg.
61.0.0.0/8
203.0.0.0/8
210.0.0.0/8
211.0.0.0/8
218.0.0.0/8
and much of 202.0.0.0, 200.0.0.0 etc.
Not everyone has this option, but if you can, it works.
I have a script which splits my text file into separate dbm files, but I
guess that's not really necessary now that I think about it.
--
Bill Duncan, VE3IED | BeachNet --> http://www.beachnet.org
bduncan@??? | - Network/System Administration
+1 416 693-5960 | - System Analysis/Design/Programming
