[isp-linux] Re: Blocking all APNIC IP Addresses

[Raju Mathur <raju@xxxxxxxxxxxxxxx>]

/me quickly updates /etc/mail/access on all systems he administers:

wppi.com    550 We do not accept mail from Nazis.  Please see April 2001 archives at http://ISP-Lists.ISP-Planet.com/isp-linux/archives/ for more information.

Copied to regional Linux and IT discussion lists to enable others to
do the same.  Don't worry, no one in Asia will ever want to do
business with you once this gets around (and I can assure you I'll do
everything in my power to ensure it does).

BTW, APNIC has the following netblocks assigned to it:

202/8, 203/8, 210/8, 211/8, 61/8 and 2001:0200::/23

With best regards,

-- Raju

>>>>> "Steve" == Steve West <wppiphoto@xxxxxxxx> writes:

    Steve> Thanks to all who replied to my question. I never thought
    Steve> my question was going to be such a discussion topic! :)

    Steve> This whole thing started several months ago, when we were
    Steve> getting scanned on the average about 3 times per hour by
    Steve> various servers from Asia!!! We have been pretty successful
    Steve> in blocking about 90% of all the scanning. On the other
    Steve> hand, the spam mail issue is still a very large problem. No
    Steve> matter what we did to block various mail servers, they just
    Steve> find a new mail server to use. As you can see, this is a
    Steve> loosing battle trying to keep up!

    Steve> I understand that we should not generalize an entire
    Steve> region, but in our case we have had more trouble
    Steve> originating/using servers from Asia than any other region!
    Steve> I'm very aware that many of these attacks are being done by
    Steve> users in the US using vulnerable systems in Asia. But
    Steve> without any real security measures in Asia, they will
    Steve> forever be the perfect target by hackers.

    Steve> This is very alarming because it speaks of the LACK of any
    Steve> laws. Basically, we came to the conclusion that at this
    Steve> point, we do not do business with anyone in the Asia region
    Steve> and could afford to ignore this entire region.  Maybe our
    Steve> policy will change when it requires but I think their laws
    Steve> must change first.

    Steve> Going back to my question, what IP addresses are assigned
    Steve> to Asia? So, far I have

    Steve> 202.0.  203.0.  210.0.  211.0.

    Steve> Thanks!

    Steve> SW
-- 
Raju Mathur          raju@xxxxxxxxxxxxx           http://kandalaya.org/