Rainer Duffner wrote: [..]
You do mean as a scoring method I hope...
Yes, but we also block. Mostly dynamic IPs and stuff on the swinog/IX-RBL.
On my own mailserver, I block all Asian IPs ;-)
Well, then this should make your firewall a lot happier I guess:
8<----------------------------------- wget -O - http://www.iana.org/assignments/ipv6-unicast-address-assignments/ipv6-unicas... grep APNIC | awk '{print $1}'
2001:0200::/23 2001:0C00::/23 2001:0E00::/23 2001:4400::/23 2001:8000::/19 2001:A000::/20 2001:B000::/20 2400:0000::/12 ---------------------------------->8
Do realize that that also includes Australia, and a lot of other Asian countries as APNIC covers a lot more.
But yes, much simpler to block on /32 boundaries. Though I really do not see why one would want to block the countries where great tech comes from. Just use an RBL, and solely use it for scoring... (and do SMTP-REJECT-AT-DATA of course)
Greets, Jeroen