Autor: Matthias-Christian Ott Data: Para: Always Learning CC: exim-users Asunto: Re: [exim] open relay aftermath
On Sun, Feb 13, 2011 at 06:39:37PM +0000, Always Learning wrote: >
> On Sun, 2011-02-13 at 18:53 +0100, Matthias-Christian Ott wrote:
>
> > The problem is that the bots IP addresses come from dynamic
> > address pools and are changing.
>
> Do a WHOIS on the IP address and block the entire range for port 25.
>
> That is what I do for Taiwan.
That's against my firmest believes. If I block IP addresses, then a) just
temporarily and b) only the IP address and never a subnet with unrelated
hosts. Everyone can make mistake and should never be permanently blocked
or affect unrelated persons.