> You are correct. I blocked the entire range 192.114.40.0/21 as a single > block as its listed in RIPE as a single block ("ACTCOM-BLOCK-3") > although it contains both dynamic IP addresses as well as hosted > services, including Actcom's own servers. > > This was my mistake and I changed the rules to only block > 192.114.44,5,6/24. I think that having both dynamic IP pools and static > IPs in the same block is wrong- exactly for this reason, as it makes it > really easy to make mistakes and block IPs incorrectly.
Just a comment for perspective to understand if it was originally a wrong thing: This (192.114.40.0/21) was the only block we had when we started as an ISP (marking it as ACTCOM-BLOCK-N was a letter thing). No one thought at those days about RBLs of dynamic IPs... Also, the number of IPs in any pool was very low, and of course we couldn't dedicate a whole /21 for them. So for historical reasons IPs of these blocks (and others) got used for various things. > That being the case - I'm not going to stop blocking IPs that deliver > SPAM, and as the RBL is (a) not listed anywhere, and (b) was initially > described with a large enough warning label, I would also continue to > block large IP blocks that I believe are also possible sources of SPAM. > > I would suggest to people who are using it to keep using it and I will > try harder not to hit innocent bystanders. To my opinion, the best thing is to use RBLs for scoring in AntiSpam software instead of automatic rejecting any mail from certain blocks. However, we here also have our own list of rejected IP blocks, because the amount of spam from some blocks is so high it severely degrades the performance of the mail servers. In that cases we still allow mail to our abuse address, and the error message says "mail [EMAIL PROTECTED] to unblock" (and we occasionally get such requests). > -- > Oded > ::.. > Instructions for life: > 9. Open your arms to change, but don't let go of your values. Amir > ================================================================= > To unsubscribe, send mail to [EMAIL PROTECTED] with > the word "unsubscribe" in the message body, e.g., run the command > echo unsubscribe | mail [EMAIL PROTECTED] > > ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]