Re: How to incorporate network blocks

[Grant Taylor via users]

On 11/10/22 9:54 AM, Joey J wrote:

Hello All,

Hi,

I'm trying to see if there is a way to incorporate network ranges into SA to essentially flag messages.

N.B. at least one of the lists below is individual IPs and not networks / ranges of IPs. -- I'm not sure how to square that peg with your wants / needs.

I know I can use iptables and reject it before getting to SA, but in some cases we would have legit email get flagged within these bigger blocks.

See Riccardo's comment about Spamhaus / Spamteq.

I would suggest investigating the other offerings from each vendor. I suspect there is a good chance that many, if not all, of them offer a DNS based query method.

I'm trying to incorporate:
feeds.dshield.org/block.txt
spamhaus.org/drop/drop.lasso
ciarmy.com/list/ci-badguys.txt
openbl.org/lists/base.txt

Short of that, it wouldn't be hard to turn them into a locally hosted BL and then configure SpamAssassin to query it.

--
Grant. . . .
unix || die

smime.p7s
Description: S/MIME Cryptographic Signature