> >/^Received: from .41\..*web.*mail.*yahoo\.com via HTTP/i > > > >I admit this is rough albeit effective. On one side, not all Africa is > >41. On the other side, I do not want to block all 41.
It seems that the hardcore users only resists in a limited amount of netblocks, so it could make sense not to make one general rule but some of them, one for any of these netranges. Sometimes these (benin for example) are really small /23 etc. Only a small part from the home networks of our really good friends: 41.73.158.0/24 41-73-x.isghana 41.74.0.0/24 bj/no-rdns 41.79.216.0/22 bj/no-rdns 41.85.161.0/24 bj/no-rdns 41.85.162.0/23 bj/no-rdns 41.85.169.0/24 bj/no-rdns=benin-telecom-adsl-akpakpa 41.85.224.0/21 bj/no-rdns=benin-telecom-adsl-dowa 41.138.88.0/22 bj/no-rdns=etisalat 41.138.164.0/22 ng/no-rdns=visafone 41.138.168.0/21 ng/no-rdns=visafone 41.138.176.0/20 ng/no-rdns=visafone 41.139.32.0/21 gh/no-rdns=avisonet 41.202.68.0/23 adsl-41.202.x.x.aviso.ci 41.202.88.0/21 adsl-41.202.x.x.aviso.ci 41.202.116.0/23 host-41-202-x-x.afnet.net 41.203.67.0/24 ng/no-rdns 41.203.118.0/24 ng/icsl-lagos
