Adam KOSA wrote:
> Hi,
>
> Mar Matthias Darin wrote:
>
> [1-4]
>
>> 5. If all you are seeking to do is block a cidr range (ex: 10.0.0.0/8),
>> your firewall would be a better option.
>
> Currently the pattern looks like this:
>
> deny hosts = \N^.*(adsl|pool)\..*$\N : \N^.*-dyn.*\..*$\N
> : \N^.*pool.*$\N : \N^.*[0-9]+-[0-9]+.*$\N
>
You should make great care in your regexes to avoid false positives. For
example, you cannot receive mails from whirlpool.com with this one. You
should probably consider using such a regex only if the host is listed
on a dynamic blacklist such as dhcp.tqmcube.com or dynablock.njabl.org.
You can also have a look at the regexes spamassassin uses for dynamic IPs.