On Sun, 23 Aug 2009, postfix....@cmulcahy.com wrote:
Ralf Hildebrandt wrote:
* Security Admin (NetSec) <secad...@netsecdesign.com>:
Could someone provide links to sites where IP addresses are grouped by
country?
I use (the free) geoip database for that.
This script has proven useful for me...
http://www.cyberciti.biz/faq/block-entier-country-using-iptables/
(Yes, the spelling error IS indeed in the URL as-is)
What I have found most useful is: geoip-policyd
It uses geoip as well but as a small policy server framework, you can do
whatever you want to do depending on where an IP originates from (re:
GeoIP).
Come from country A/B? -> Use a specific smtpd custom class.
Come from country C/D? -> Maybe more spam from here? Use a different
check.
Come from your country? -> DUNNO or greylist
.. etc
http://translate.google.com/translate?hl=en&sl=ja&u=http://d.hatena.ne.jp/kuni92/20071004/p1&ei=3lSRSpnSAojSNbn07ZEK&sa=X&oi=translate&resnum=3&ct=result&prev=/search%3Fq%3Dgeoip-policyd%2Bpostfix%2Bjp%26hl%3Den%26safe%3Doff%26client%3Dfirefox-a%26rls%3Dorg.mozilla:en-US:official%26hs%3DNfE%26num%3D30
http://blog.browncat.org/files/geoip-policyd-0.01.tar.gz
Justin.
